Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,194

Export CSV
CVE-2017-17087

vim: Sets the group ownership of a .swp file to the editor's primary group

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Vim
Products
Ubuntu Linux Debian Linux Vim
CVE-2018-1000156

patch: Malicious patch files cause ed to execute arbitrary commands

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.

CVSS 3.0 · 7.8 High EPSS 5.3% KEV · Not listed
Vendors
Canonical Debian Gnu and 1 more
Products
Ubuntu Linux Debian Linux Patch and 11 more
CVE-2015-8928

libarchive: Heap out of bounds read in mtree parser

The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2015-8931

libarchive: Undefined behavior (signed integer overflow) in mtree parser

Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Libarchive and 2 more
Products
Ubuntu Linux Debian Linux Libarchive and 4 more
CVE-2015-8925

libarchive: Unclear invalid memory read in mtree parser

The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2015-8926

libarchive: NULL pointer access in RAR parser

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Libarchive Redhat and 1 more
Products
Ubuntu Linux Libarchive Enterprise Linux and 3 more
CVE-2015-8932

libarchive: Undefined behavior / invalid shiftleft in TAR parser

The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Libarchive and 2 more
Products
Ubuntu Linux Debian Linux Libarchive and 4 more
CVE-2015-8922

libarchive: NULL pointer access in 7z parser

The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Novell and 2 more
Products
Ubuntu Linux Libarchive Suse Linux Enterprise Desktop and 4 more
CVE-2015-8933

libarchive: Undefined behavior / signed integer overflow in TAR parser

Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Suse
Products
Ubuntu Linux Libarchive Linux Enterprise Desktop and 2 more
CVE-2015-8899

dnsmasq: Denial-of-service when empty address from DNS overlays A record from hosts

Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Canonical Thekelleys
Products
Ubuntu Linux Dnsmasq
CVE-2015-8916

libarchive: NULL pointer access in RAR parser through bsdtar

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file.

CVSS 3.0 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Libarchive and 1 more
Products
Ubuntu Linux Debian Linux Libarchive and 1 more
CVE-2015-8868

poppler: heap buffer overflow in ExponentialFunction

Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.

CVSS 3.0 · 7.8 High EPSS 4.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2015-8872

dosfstools: Off-by-2 error leading to corruption in FAT12

The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error."

CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Dosfstools Project Opensuse
Products
Ubuntu Linux Dosfstools Leap and 1 more
CVE-2015-8917

libarchive: NULL pointer access in CAB parser

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Libarchive and 1 more
Products
Ubuntu Linux Debian Linux Libarchive and 1 more
CVE-2015-8839

kernel: ext4 filesystem page fault race condition with fallocate call.

Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 2 more