Vulnerability index

Browse CVEs

771 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Reachable AssertionCWE-617 × clear
Debian Linux HIGH 7.5
CVE-2017-17432

OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system crash or appl…

Fix: 1.6.22+
Fix from $1,950 2017-12-06
Debian Linux MEDIUM 5.5
CVE-2017-15371

There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a…

No fix yet
Fix from $1,600 2017-10-16
Linux Kernel MEDIUM 5.5
CVE-2017-1000252

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or cr…

Fix: after 4.13.3
Fix from $1,600 2017-09-26
Graphicsmagick MEDIUM 5.5
CVE-2017-14649

ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failu…

Patch available
Fix from $1,600 2017-09-21
Linux Kernel MEDIUM 6.0
CVE-2017-12168

The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial …

Fix: after 4.8.10
Fix from $1,600 2017-09-20
Qemu MEDIUM 6.5
CVE-2017-13673

The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (asse…

Patch available
Fix from $1,600 2017-08-29
Fedora HIGH 7.5
CVE-2017-13749

There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of servi…

No fix yet
Fix from $1,950 2017-08-29
Fedora HIGH 7.5
CVE-2017-13750

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial o…

No fix yet
Fix from $1,950 2017-08-29
Fedora HIGH 7.5
CVE-2017-13751

There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service a…

No fix yet
Fix from $1,950 2017-08-29
Fedora HIGH 7.5
CVE-2017-13752

There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service …

No fix yet
Fix from $1,950 2017-08-29
Libtiff MEDIUM 6.5
CVE-2017-13726

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted …

Mitigation only
Fix from $1,600 2017-08-29
Libtiff MEDIUM 6.5
CVE-2017-13727

There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A cr…

Mitigation only
Fix from $1,600 2017-08-29
Jasper HIGH 7.5
CVE-2017-13745

There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of ser…

Mitigation only
Fix from $1,950 2017-08-29
Fedora HIGH 7.5
CVE-2017-13746

There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial o…

No fix yet
Fix from $1,950 2017-08-29
Fedora HIGH 7.5
CVE-2017-13747

There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service …

No fix yet
Fix from $1,950 2017-08-29
Imagemagick MEDIUM 6.5
CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial…

Fix: after 6.9.9-2
Fix from $1,600 2017-08-24
Imagemagick MEDIUM 6.5
CVE-2017-13132

In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor pack…

Patch available
Fix from $1,600 2017-08-23
Pspp HIGH 7.5
CVE-2017-12959

There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will …

Mitigation only
Fix from $1,950 2017-08-18
Pspp HIGH 7.5
CVE-2017-12960

There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will…

Mitigation only
Fix from $1,950 2017-08-18
Fedora MEDIUM 6.5
CVE-2017-11368

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requ…

Patch available
Fix from $1,600 2017-08-09
Imagemagick MEDIUM 6.5
CVE-2017-12670

In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/imag…

Patch available
Fix from $1,600 2017-08-07
Imagemagick MEDIUM 6.5
CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a …

Patch available
Fix from $1,600 2017-08-04
Yaml Cpp HIGH 7.5
CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion fail…

Fix: after 0.5.3
Fix from $1,950 2017-07-30
Ubuntu Linux MEDIUM 6.5
CVE-2017-11683

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denia…

Mitigation only
Fix from $1,600 2017-07-27
Imagemagick MEDIUM 6.5
CVE-2017-11524

The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of servic…

Fix: after 6.9.8-10
Fix from $1,600 2017-07-23
Openvpn HIGH 7.5
CVE-2017-7508

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.

Fix: after 2.3.16
Fix from $1,950 2017-06-27
Tor HIGH 7.5
CVE-2017-0375

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_…

Fix: 0.3.0.8+
Fix from $1,950 2017-06-09
Debian Linux HIGH 7.5
CVE-2017-0376

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_…

Fix: 0.3.0.8+
Fix from $1,950 2017-06-09
Imagemagick MEDIUM 6.5
CVE-2017-9499

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of ser…

Patch available
Fix from $1,600 2017-06-07
Imagemagick MEDIUM 6.5
CVE-2017-9500

In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of ser…

Patch available
Fix from $1,600 2017-06-07