Export limit exceeded: 425979 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 17088 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2009-1375

pidgin PurpleCircBuffer corruption

The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Pidgin Redhat
Products
Pidgin Enterprise Linux
CVE-2009-1376

pidgin incomplete fix for CVE-2008-2927

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.

CVSS 2.0 · 9.3 Critical EPSS 13.3% KEV · Not listed
Vendors
Pidgin Redhat
Products
Pidgin Enterprise Linux
CVE-2009-1377

OpenSSL: DTLS epoch record buffer memory DoS

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

CVSS 2.0 · 5.0 Medium EPSS 11.3% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux
CVE-2009-1378

OpenSSL: DTLS fragment handling memory DoS

Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."

CVSS 2.0 · 5.0 Medium EPSS 12.7% KEV · Not listed
Vendors
Canonical Openssl Redhat
Products
Ubuntu Linux Openssl Enterprise Linux
CVE-2009-1379

OpenSSL: DTLS pointer use-after-free flaw (DoS)

Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.

CVSS 2.0 · 5.0 Medium EPSS 18.2% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux
CVE-2009-1384

pam_krb5: Password prompt varies for existent and non-existent users

pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.

CVSS 2.0 · 5.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Eyrie Redhat
Products
Pam-krb5 Enterprise Linux
CVE-2009-1385

kernel: e1000_clean_rx_irq() denial of service

Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.

CVSS 2.0 · 7.8 High EPSS 33.7% KEV · Not listed
Vendors
Intel Linux Redhat
Products
E1000 Kernel Linux Kernel and 3 more
CVE-2009-1386

openssl: DTLS NULL deref crash on early ChangeCipherSpec request

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

CVSS 2.0 · 5.0 Medium EPSS 80.1% KEV · Not listed
Vendors
Canonical Openssl Redhat
Products
Ubuntu Linux Openssl Enterprise Linux and 1 more
CVE-2009-1387

openssl: DTLS out-of-sequence message handling NULL deref DoS

The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."

CVSS 2.0 · 5.0 Medium EPSS 10.3% KEV · Not listed
Vendors
Canonical Openssl Redhat
Products
Ubuntu Linux Openssl Enterprise Linux and 1 more
CVE-2009-1388

kernel: do_coredump() vs ptrace_start() deadlock

The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via vectors involving the ptrace system call and a coredumping thread.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus
CVE-2009-1389

kernel: r8169: fix crash when large packets are received

Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.

CVSS 2.0 · 7.8 High EPSS 5.5% KEV · Not listed
Vendors
Linux Redhat
Products
Kernel Linux Kernel Enterprise Linux and 2 more
CVE-2009-1392

Firefox browser engine crashes

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.

CVSS 2.0 · 9.3 Critical EPSS 9.3% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Seamonkey Thunderbird and 1 more
CVE-2009-1439

kernel: cifs: memory overwrite when saving nativeFileSystem field during mount

Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.

CVSS 2.0 · 7.8 High EPSS 4.3% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg
CVE-2009-1570

Gimp: Integer overflow in the BMP image file plugin

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 8.0% KEV · Not listed
Vendors
Gimp Redhat
Products
Gimp Enterprise Linux
CVE-2009-1574

ipsec-tools: racoon NULL dereference in fragmentation code

racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service (crash) via crafted fragmented packets without a payload, which triggers a NULL pointer dereference.

CVSS 2.0 · 5.0 Medium EPSS 11.6% KEV · Not listed
Vendors
Ipsec-tools Redhat
Products
Ipsec-tools Enterprise Linux
CVE-2009-1577

cscope: putstring buffer overflow

Multiple stack-based buffer overflows in the putstring function in find.c in Cscope before 15.6 allow user-assisted remote attackers to execute arbitrary code via a long (1) function name or (2) symbol in a source-code file.

CVSS 2.0 · 9.3 Critical EPSS 7.5% KEV · Not listed
Vendors
Cscope Redhat
Products
Cscope Enterprise Linux
CVE-2009-1578

SquirrelMail: Multiple cross site scripting issues

Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) certain encrypted strings in e-mail headers, related to contrib/decrypt_headers.php; (2) PHP_SELF; and (3) the query string (aka QUERY_STRING).

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat Squirrelmail
Products
Enterprise Linux Squirrelmail
CVE-2009-1579

SquirrelMail: Server-side code injection in map_yp_alias username map

The map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to execute arbitrary commands via shell metacharacters in a username string that is used by the ypmatch program.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Redhat Squirrelmail
Products
Enterprise Linux Squirrelmail
CVE-2009-1581

SquirrelMail: CSS positioning vulnerability

functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in HTML e-mail messages, which allows remote attackers to spoof the user interface, and conduct cross-site scripting (XSS) and phishing attacks, via a crafted message.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Squirrelmail
Products
Enterprise Linux Squirrelmail