Browse CVEs

MEDIUM 5.5 CVE-2016-8884 The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference)… Fedora Patch available Fix from $1,6002017-03-28 MEDIUM 5.5 CVE-2017-7274 The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference… Radare2 Patch available Fix from $1,6002017-03-27 MEDIUM 5.9 CVE-2015-8762 The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) v… Freeradius Patch available Fix from $1,6002017-03-27 HIGH 7.5 CVE-2016-4912EPSS 5% The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) v… Openslp No fix yet Fix from $1,9502017-03-27 HIGH 7.5 CVE-2017-7243 Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packe… Tinydtls Mitigation only Fix from $1,9502017-03-24 HIGH 7.5 CVE-2016-10129 The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer d… Libgit2 after 0.24.5 Fix from $1,9502017-03-24 HIGH 7.5 CVE-2016-10132 regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to reg… Fedora Patch available Fix from $1,9502017-03-24 MEDIUM 5.5 CVE-2016-8885 The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer deref… Jasper after 1.900.8 Fix from $1,6002017-03-23 MEDIUM 5.5 CVE-2016-8887 The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer… Fedora after 1.900.9 Fix from $1,6002017-03-23 HIGH 7.5 CVE-2017-7225 The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both em… Binutils Patch available Fix from $1,9502017-03-22 MEDIUM 5.5 CVE-2017-7207 The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer der… Ghostscript Patch available Fix from $1,6002017-03-21 MEDIUM 5.5 CVE-2017-7209 The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leadin… Binutils Patch available Fix from $1,6002017-03-21 HIGH 7.8 CVE-2017-6178 The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointe… Usbpcap No fix yet Fix from $1,9502017-03-20 MEDIUM 5.9 CVE-2017-0016EPSS 26% Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certai… Windows 10 Patch available Fix from $1,6002017-03-17 MEDIUM 5.5 CVE-2017-6951 The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service (NULL … Linux Kernel after 3.14.79 Fix from $1,6002017-03-16 MEDIUM 5.5 CVE-2015-8898 The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dere… Imagemagick after 6.9.2-3 Fix from $1,6002017-03-15 MEDIUM 6.5 CVE-2017-5937 The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to c… Virglrenderer after 0.5.0 Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6841 The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denia… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6842 The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer d… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6845 The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6846 The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a den… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6847 The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer deref… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6848 The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dere… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6849 The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer d… Podofo Mitigation only Fix from $1,6002017-03-15 MEDIUM 5.5 CVE-2017-6850 The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) vi… Jasper after 2.0.12 Fix from $1,6002017-03-15 HIGH 7.5 CVE-2016-10248 The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Jasper after 1.900.8 Fix from $1,9502017-03-15 HIGH 7.5 CVE-2016-10250 The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of service (NULL pointer dereference) … Jasper after 1.900.12 Fix from $1,9502017-03-15 MEDIUM 6.5 CVE-2017-6210 The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (NULL pointe… Virglrenderer after 0.5.0 Fix from $1,6002017-03-15 HIGH 7.5 CVE-2016-10189 BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via … Bitlbee after 3.5 Fix from $1,9502017-03-14 CRITICAL 9.8 CVE-2017-5668 bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitra… Bitlbee after 3.5 Fix from $2,3002017-03-14