Browse CVEs

HIGH 7.5 CVE-2017-5194 Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message. Debian Linux 0.8.21+ Fix from $1,9502017-03-03 HIGH 7.0 CVE-2017-6346 Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possib… Linux Kernel 3.2.87 / 3.10.106+ Fix from $1,9502017-03-01 MEDIUM 5.5 CVE-2017-5666 The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (invalid free and crash) via a c… Mp3splt No fix yet Fix from $1,6002017-03-01 MEDIUM 5.5 CVE-2016-4487 Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, r… Libiberty Mitigation only Fix from $1,6002017-02-24 MEDIUM 5.5 CVE-2016-4488 Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, r… Libiberty Mitigation only Fix from $1,6002017-02-24 HIGH 7.8 CVE-2017-6196 Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739… Afpl Ghostscript after 8452f9238959a4d518af365812bf031fe4d8d4b7 Fix from $1,9502017-02-24 HIGH 7.5 CVE-2016-10109 Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsLi… Ubuntu Linux after 1.8.19 Fix from $1,9502017-02-23 HIGH 7.8 CVE-2017-2353EPSS 6% An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Bluetooth" component. It allows attacker… Mac Os X after 10.12.2 Fix from $1,9502017-02-20 HIGH 7.8 CVE-2017-2360EPSS 9% An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. w… Iphone Os 2.16.3 / 3.1.3+ Fix from $1,9502017-02-20 HIGH 7.8 CVE-2016-7633 An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Directory Services" component. It allows… Mac Os X after 10.12.1 Fix from $1,9502017-02-20 HIGH 7.8 CVE-2016-7644EPSS 15% An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. T… Iphone Os after 10.12.1 Fix from $1,9502017-02-20 HIGH 7.8 CVE-2016-7621 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. T… Watchos after 10.12.1 Fix from $1,9502017-02-20 MEDIUM 6.5 CVE-2016-7591 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. T… Iphone Os after 10.12.1 Fix from $1,6002017-02-20 MEDIUM 6.3 CVE-2017-5019 A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potent… Chrome after 55.0.2883.87 Fix from $1,6002017-02-17 HIGH 7.5 CVE-2017-5357 regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free. Fedora after 1.14 Fix from $1,9502017-02-17 MEDIUM 5.5 CVE-2016-8674 The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application cra… Mupdf after 1.9a Fix from $1,6002017-02-15 HIGH 7.5 CVE-2017-3302 Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10… MySQL 5.6.21 / 5.7.5+ Fix from $1,9502017-02-12 HIGH 7.5 CVE-2017-5843 Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_update_essence_tracks functio… Gstreamer after 1.10.2 Fix from $1,9502017-02-09 HIGH 7.8 CVE-2017-0428 An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the cont… Linux Kernel after 7.1.1 Fix from $1,9502017-02-08 HIGH 7.8 CVE-2014-9914 Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges… Linux Kernel 3.10.45 / 3.12.23+ Fix from $1,9502017-02-07 CRITICAL 9.8 CVE-2016-10150EPSS 10% Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to… Linux Kernel 4.8.13+ Fix from $2,3002017-02-06 CRITICAL 10.0 CVE-2016-6082 IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker cou… Bigfix Platform Patch available Fix from $2,3002017-02-01 MEDIUM 5.5 CVE-2016-5823 The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics f… Libical Mitigation only Fix from $1,6002017-01-27 MEDIUM 5.5 CVE-2016-5824 libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. Ubuntu Linux Patch available Fix from $1,6002017-01-27 MEDIUM 5.5 CVE-2016-9401 popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. Debian Linux 4.4+ Fix from $1,6002017-01-23 CRITICAL 9.8 CVE-2016-3177 Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors. Giflib Patch available Fix from $2,3002017-01-23 HIGH 8.8 CVE-2016-5203 A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker … Chrome after 54.0.2840.99 Fix from $1,9502017-01-19 HIGH 8.8 CVE-2016-5211 A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker … Chrome after 54.0.2840.99 Fix from $1,9502017-01-19 HIGH 8.8 CVE-2016-5213 A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to p… Chrome after 54.0.2840.99 Fix from $1,9502017-01-19 MEDIUM 6.3 CVE-2016-5215 A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacke… Chrome after 54.0.2840.99 Fix from $1,6002017-01-19