CVE-2014-9667

freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.

CVSS 2.0 · 6.8 Medium EPSS 3.5% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 9 more

CVE-2014-9669

freetype: multiple integer overflows leading to buffer over-reads in cmap handling

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 10 more

CVE-2014-9670

freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference

Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.

CVSS 2.0 · 4.3 Medium EPSS 4.2% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 10 more

CVE-2016-5418

libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

CVSS 3.0 · 7.5 High EPSS 4.7% KEV · Not listed

Vendors

Libarchive Oracle Redhat

Products

Libarchive Linux Enterprise Linux and 8 more

CVE-2016-5844

libarchive: undefined behaviour (integer overflow) in iso parser

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.

CVSS 3.0 · 6.5 Medium EPSS 4.1% KEV · Not listed

Vendors

Libarchive Oracle Redhat

Products

Libarchive Linux Solaris and 8 more

CVE-2016-6325

tomcat: tomcat writable config files allow privilege escalation

The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Apache Redhat

Products

Tomcat Enterprise Linux Enterprise Linux Desktop and 8 more

CVE-2016-7091

sudo: Possible info leak via INPUTRC

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

CVSS 3.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Enterprise Linux Desktop Enterprise Linux Hpc Node and 2 more

CVE-2016-7166

libarchive: Denial of service using a crafted gzip file

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Libarchive Oracle Redhat

Products

Libarchive Linux Enterprise Linux and 7 more

CVE-2016-7796

systemd: freeze when PID 1 receives a zero-length message over notify socket

The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Novell Redhat Systemd Project

Products

Suse Linux Enterprise Desktop Suse Linux Enterprise Server Suse Linux Enterprise Server For Sap and 8 more

CVE-2010-5325

foomatic: potential remote arbitrary code execution

Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed

Vendors

Linuxfoundation Oracle Redhat

Products

Foomatic-filters Linux Enterprise Linux and 5 more

CVE-2013-5895

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

CVSS 2.0 · 5.0 Medium EPSS 5.7% KEV · Not listed

Vendors

Hp Oracle Redhat

Products

Hp-ux Jdk Jre and 9 more

CVE-2013-5870

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0 · 6.8 Medium EPSS 4.8% KEV · Not listed

Vendors

Hp Oracle Redhat

Products

Hp-ux Jdk Jre and 9 more

CVE-2012-5689

bind: denial of service when processing queries and with both DNS64 and RPZ enabled

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query for an AAAA record.

CVSS 2.0 · 7.1 High EPSS 12.1% KEV · Not listed

Vendors

Canonical Isc Redhat

Products

Ubuntu Linux Bind Enterprise Linux and 6 more

CVE-2014-0418

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0424.

CVSS 2.0 · 5.1 Medium EPSS 6.3% KEV · Not listed

Vendors

Hp Oracle Redhat

Products

Hp-ux Jdk Jre and 10 more

CVE-2014-0382

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect availability via unknown vectors related to JavaFX.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed

Vendors

Hp Oracle Redhat

Products

Hp-ux Jdk Jre and 9 more

CVE-2013-5906

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.

CVSS 2.0 · 5.1 Medium EPSS 6.3% KEV · Not listed

Vendors

Hp Oracle Redhat

Products

Hp-ux Jdk Jre and 10 more

CVE-2013-5904

JDK: unspecified vulnerability fixed in 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 6.8 Medium EPSS 4.9% KEV · Not listed

Vendors

Hp Oracle Redhat

Products

Hp-ux Jdk Jre and 8 more

CVE-2012-1703

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Apr 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer, a different vulnerability than CVE-2012-1690.

CVSS 2.0 · 6.8 Medium EPSS 3.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 5 more

CVE-2012-6137

subscription-manager: rhn-migrate-classic-to-rhsm missing SSL certificate verification

rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when migrating to a Certificate-based Red Hat Network, which allows remote man-in-the-middle attackers to obtain sensitive information such as user credentials.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Enterprise Linux Desktop Enterprise Linux Eus and 6 more

CVE-2012-0867

postgresql: MITM due improper x509_v3 CN validation during certificate verification

PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SSL certificates, which allows remote attackers to spoof connections when the host name is exactly 32 characters.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed

Vendors

Debian Opensuse Project Postgresql and 1 more

Products

Debian Linux Opensuse Postgresql and 8 more