Browse CVEs

MEDIUM 5.5 CVE-2015-9099 The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and applica… Lame Mitigation only Fix from $1,6002017-06-25 MEDIUM 5.5 CVE-2017-9869 The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a deni… Lame No fix yet Fix from $1,6002017-06-25 MEDIUM 5.5 CVE-2017-9870 The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a den… Lame Mitigation only Fix from $1,6002017-06-25 MEDIUM 5.5 CVE-2017-9865 The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over… Debian Linux Mitigation only Fix from $1,6002017-06-25 MEDIUM 5.5 CVE-2017-9847 The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (heap-based buffer over-read and applica… Libtorrent Patch available Fix from $1,6002017-06-24 MEDIUM 5.5 CVE-2017-9782 JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related t… Jasper Patch available Fix from $1,6002017-06-21 MEDIUM 5.5 CVE-2017-9130 The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (invali… Freeware Advanced Audio Coder No fix yet Fix from $1,6002017-06-21 HIGH 7.5 CVE-2017-7668EPSS 57% The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to searc… HTTP Server Patch available Fix from $1,9502017-06-20 CRITICAL 9.8 CVE-2017-9728 In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression. Uclibc Mitigation only Fix from $2,3002017-06-16 HIGH 7.8 CVE-2017-7365 In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated. Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8234 In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. Android Patch available Fix from $1,9502017-06-13 HIGH 7.8 CVE-2017-8240 In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability. Android Patch available Fix from $1,9502017-06-13 MEDIUM 6.5 CVE-2017-9123 The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read an… Libquicktime No fix yet Fix from $1,6002017-06-12 MEDIUM 6.5 CVE-2017-9125 The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over… Libquicktime No fix yet Fix from $1,6002017-06-12 MEDIUM 6.5 CVE-2017-9128 The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer o… Libquicktime No fix yet Fix from $1,6002017-06-12 HIGH 7.8 CVE-2017-4910 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG200… Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2017-4912 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueTyp… Horizon View Mitigation only Fix from $1,9502017-06-08 MEDIUM 5.5 CVE-2017-9471 In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and applicatio… Ubuntu Linux No fix yet Fix from $1,6002017-06-07 MEDIUM 5.5 CVE-2017-9472 In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and applicati… Ytnef No fix yet Fix from $1,6002017-06-07 MEDIUM 5.5 CVE-2017-9474 In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based buffer over-read and appli… Ytnef No fix yet Fix from $1,6002017-06-07 HIGH 7.1 CVE-2017-9465 The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtai… Yara Patch available Fix from $1,9502017-06-06 MEDIUM 5.3 CVE-2017-9434 Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter. Crypto\+\+ after 5.6.4 Fix from $1,6002017-06-05 HIGH 7.5 CVE-2017-9359 The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.1… Open Source Mitigation only Fix from $1,9502017-06-02 HIGH 7.8 CVE-2017-9301 plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid rea… Vlc Media Player after 2.2.4 Fix from $1,9502017-05-29 CRITICAL 9.8 CVE-2017-9264 In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6… Openvswitch Patch available Fix from $2,3002017-05-29 CRITICAL 9.8 CVE-2017-9265 In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` i… Openvswitch Patch available Fix from $2,3002017-05-29 CRITICAL 9.8 CVE-2017-9224EPSS 7% An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds r… PHP 5.6.31 / 7.0.21+ Fix from $2,3002017-05-24 CRITICAL 9.8 CVE-2017-9227EPSS 6% An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds r… PHP 5.6.31 / 7.0.21+ Fix from $2,3002017-05-24 CRITICAL 9.8 CVE-2017-2801 A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certif… Botan No fix yet Fix from $2,3002017-05-24 MEDIUM 5.5 CVE-2017-8310 Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond al… Vlc Media Player Mitigation only Fix from $1,6002017-05-23