Browse CVEs

HIGH 8.8 CVE-2017-12599 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an ima… Debian Linux after 3.3.0 Fix from $1,9502017-08-07 HIGH 7.8 CVE-2017-12449 The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 a… Binutils after 2.29 Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-12451 The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distrib… Binutils after 2.29 Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-12452 The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in … Binutils after 2.29 Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-12453 The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlie… Binutils after 2.29 Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-12454 The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and… Binutils after 2.29 Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-12455 The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earl… Binutils after 2.29 Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-12456 The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read… Binutils after 2.29 Fix from $1,9502017-08-04 HIGH 7.8 CVE-2017-12458 The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils … Binutils after 2.29 Fix from $1,9502017-08-04 MEDIUM 5.5 CVE-2017-9770 A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause an out of bounds read operation to occur due to a fie… Razer Synapse No fix yet Fix from $1,6002017-08-02 MEDIUM 5.5 CVE-2017-12142 In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of serv… Ytnef Mitigation only Fix from $1,6002017-08-02 HIGH 7.5 CVE-2017-12067 Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c. Potrace Mitigation only Fix from $1,9502017-08-01 HIGH 7.5 CVE-2017-11668 An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of networ… Eapmd5pass No fix yet Fix from $1,9502017-07-31 HIGH 7.5 CVE-2017-11669 An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of networ… Eapmd5pass No fix yet Fix from $1,9502017-07-31 HIGH 7.5 CVE-2017-11670 A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapuser… Eapmd5pass No fix yet Fix from $1,9502017-07-31 MEDIUM 5.5 CVE-2017-11358EPSS 14% The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and appl… Debian Linux No fix yet Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11547 The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via… Timidity\+\+ Mitigation only Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11114 The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML… Links Mitigation only Fix from $1,6002017-07-31 HIGH 7.8 CVE-2017-11116 The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffe… Openexif No fix yet Fix from $1,9502017-07-31 MEDIUM 5.5 CVE-2017-11117 The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffe… Openexif No fix yet Fix from $1,6002017-07-31 MEDIUM 5.5 CVE-2017-11119 The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (inval… Nosefart No fix yet Fix from $1,6002017-07-31 MEDIUM 6.5 CVE-2017-11753 The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buf… Imagemagick Patch available Fix from $1,6002017-07-30 MEDIUM 5.5 CVE-2017-11728 A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attac… Ming Mitigation only Fix from $1,6002017-07-29 MEDIUM 5.5 CVE-2017-11729 A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which al… Ming Mitigation only Fix from $1,6002017-07-29 MEDIUM 5.5 CVE-2017-11730 A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which al… Ming Mitigation only Fix from $1,6002017-07-29 MEDIUM 5.5 CVE-2017-11731 An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, wh… Ming Mitigation only Fix from $1,6002017-07-29 MEDIUM 5.5 CVE-2017-11734 A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a de… Ming Mitigation only Fix from $1,6002017-07-29 MEDIUM 6.5 CVE-2017-11722 The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and a… Graphicsmagick Patch available Fix from $1,6002017-07-28 MEDIUM 6.5 CVE-2017-11704 A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of se… Ming No fix yet Fix from $1,6002017-07-28 HIGH 7.8 CVE-2017-11714 psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of ser… Debian Linux Patch available Fix from $1,9502017-07-28