Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2017-17879

ImageMagick: Heap-based buffer over-read in ReadOneMNGImage function in coders/png.c

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-17806

kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 4 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 6 more
CVE-2017-17805

kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service

The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 4 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2017-17815

nasm: Illegal address access in is_mmacro function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17788

gimp: Stack-based buffer over-read in xcf_load_stream function in app/xcf/xcf.c

In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17789

gimp: Heap-based buffer overflow in read_channel_data function in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17810

nasm: Segfault via mishandled macro calls in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17785

gimp: Heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c

In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17786

gimp: Heap-based buffer over-read in ReadImage function in plug-ins/common/file-tga.c

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17784

gimp: Heap-based buffer over-read in load_image function in plug-ins/common/file-gbr.c

In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17787

gimp: Heap-based buffer over-read in read_creator_block function in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Gimp
Products
Ubuntu Linux Debian Linux Gimp
CVE-2017-17811

nasm: Heap-based buffer overflow in paste_tokens function in asm/preproc.c

In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Canonical Nasm
Products
Ubuntu Linux Netwide Assembler
CVE-2017-17881

ImageMagick: memory leak vulnerability in the function ReadMATImage in coders/mat.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17669

exiv2: Heap-based buffer over-read in PngChunk::keyTXTChunk function of pngchunk_int.cpp

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Exiv2
Products
Ubuntu Linux Debian Linux Exiv2
CVE-2017-17087

vim: Sets the group ownership of a .swp file to the editor's primary group

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Vim
Products
Ubuntu Linux Debian Linux Vim
CVE-2017-17480

openjpeg: Stack-buffer overflow in the pgxtovolume function

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian Uclouvain
Products
Ubuntu Linux Debian Linux Openjpeg
CVE-2017-17680

ImageMagick: Memory leak in ReadXPMImage function in coders/xpm.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-16642

php: Out-of-bound read in timelib_meridian()

In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.

CVSS 3.0 · 7.5 High EPSS 26.4% KEV · Not listed
Vendors
Canonical Debian Netapp and 2 more
Products
Ubuntu Linux Debian Linux Clustered Data Ontap and 3 more