Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,842

Export CSV
CVE-2017-5885

gtk-vnc: Integer overflow when processing SetColorMapEntries

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora Gtk-vnc Enterprise Linux
CVE-2017-5884

gtk-vnc: Improper check of framebuffer boundaries when processing a tile

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora Gtk-vnc Enterprise Linux
CVE-2017-16818

ceph: Failed assertion through user input in ceph_assert() function in rgw_iam_policy.cc

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Ceph
CVE-2017-13704

dnsmasq: Size parameter overflow via large DNS query

In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.

CVSS 3.0 · 7.5 High EPSS 65.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2017-11610

supervisor: Command injection via malicious XML-RPC request

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.

CVSS 3.0 · 8.8 High EPSS 87.5% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Cloudforms and 2 more
CVE-2017-11368

krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Fedoraproject Mit Redhat
Products
Fedora Kerberos Kerberos 5 and 1 more
CVE-2017-1000050

jasper: NULL pointer exception in jp2_encode()

JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Fedoraproject Jasper Project and 1 more
Products
Ubuntu Linux Fedora Jasper and 4 more
CVE-2016-9811

gstreamer: Out of bounds heap read in windows_icon_typefind

The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.

CVSS 3.1 · 4.7 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Gstreamer and 1 more
Products
Debian Linux Fedora Gstreamer and 7 more
CVE-2016-8884

jasper: missing jas_matrix_create() parameter checks

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.

CVSS 3.0 · 5.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Fedoraproject Jasper Project Redhat
Products
Fedora Jasper Enterprise Linux
CVE-2016-8693

jasper: incorrect handling of bufsize 0 in mem_resize()

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.

CVSS 3.0 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Fedoraproject Jasper Project Opensuse and 1 more
Products
Fedora Jasper Opensuse and 1 more
CVE-2016-8692

jasper: missing SIZ marker segment XRsiz and YRsiz fields range check

The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Fedoraproject Jasper Project and 1 more
Products
Debian Linux Fedora Jasper and 1 more
CVE-2016-8691

jasper: missing SIZ marker segment XRsiz and YRsiz fields range check

The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Fedoraproject Jasper Project and 1 more
Products
Debian Linux Fedora Jasper and 1 more
CVE-2016-8690

jasper: missing jas_matrix_create() parameter checks

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Fedoraproject Jasper Project Redhat
Products
Fedora Jasper Enterprise Linux
CVE-2016-7103

jquery-ui: cross-site scripting in dialog closeText

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

CVSS 3.1 · 6.1 Medium EPSS 29.2% KEV · Not listed
Vendors
Debian Fedoraproject Jqueryui and 4 more
Products
Debian Linux Fedora Jquery Ui and 10 more
CVE-2016-5178

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Google and 2 more
Products
Debian Linux Fedora Chrome and 5 more
CVE-2016-5177

chromium-browser: use after free in v8

Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Google and 2 more
Products
Debian Linux Fedora Chrome and 5 more