Browse CVEs

HIGH 7.5 CVE-2017-17432 OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system crash or appl… Debian Linux 1.6.22+ Fix from $1,9502017-12-06 MEDIUM 5.5 CVE-2017-15371 There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a… Debian Linux No fix yet Fix from $1,6002017-10-16 MEDIUM 5.5 CVE-2017-1000252 The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or cr… Linux Kernel after 4.13.3 Fix from $1,6002017-09-26 MEDIUM 5.5 CVE-2017-14649 ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failu… Graphicsmagick Patch available Fix from $1,6002017-09-21 MEDIUM 6.0 CVE-2017-12168 The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial … Linux Kernel after 4.8.10 Fix from $1,6002017-09-20 MEDIUM 6.5 CVE-2017-13673 The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (asse… Qemu Patch available Fix from $1,6002017-08-29 HIGH 7.5 CVE-2017-13749 There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of servi… Fedora No fix yet Fix from $1,9502017-08-29 HIGH 7.5 CVE-2017-13750 There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial o… Fedora No fix yet Fix from $1,9502017-08-29 HIGH 7.5 CVE-2017-13751 There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service a… Fedora No fix yet Fix from $1,9502017-08-29 HIGH 7.5 CVE-2017-13752 There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service … Fedora No fix yet Fix from $1,9502017-08-29 MEDIUM 6.5 CVE-2017-13726 There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted … Libtiff Mitigation only Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13727 There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A cr… Libtiff Mitigation only Fix from $1,6002017-08-29 HIGH 7.5 CVE-2017-13745 There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of ser… Jasper Mitigation only Fix from $1,9502017-08-29 HIGH 7.5 CVE-2017-13746 There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial o… Fedora No fix yet Fix from $1,9502017-08-29 HIGH 7.5 CVE-2017-13747 There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service … Fedora No fix yet Fix from $1,9502017-08-29 MEDIUM 6.5 CVE-2017-13658 In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial… Imagemagick after 6.9.9-2 Fix from $1,6002017-08-24 MEDIUM 6.5 CVE-2017-13132 In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor pack… Imagemagick Patch available Fix from $1,6002017-08-23 HIGH 7.5 CVE-2017-12959 There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will … Pspp Mitigation only Fix from $1,9502017-08-18 HIGH 7.5 CVE-2017-12960 There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will… Pspp Mitigation only Fix from $1,9502017-08-18 MEDIUM 6.5 CVE-2017-11368 In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requ… Fedora Patch available Fix from $1,6002017-08-09 MEDIUM 6.5 CVE-2017-12670 In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/imag… Imagemagick Patch available Fix from $1,6002017-08-07 MEDIUM 6.5 CVE-2017-12434 In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a … Imagemagick Patch available Fix from $1,6002017-08-04 HIGH 7.5 CVE-2017-11692 The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion fail… Yaml Cpp after 0.5.3 Fix from $1,9502017-07-30 MEDIUM 6.5 CVE-2017-11683 There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denia… Ubuntu Linux Mitigation only Fix from $1,6002017-07-27 MEDIUM 6.5 CVE-2017-11524 The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of servic… Imagemagick after 6.9.8-10 Fix from $1,6002017-07-23 HIGH 7.5 CVE-2017-7508 OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet. Openvpn after 2.3.16 Fix from $1,9502017-06-27 HIGH 7.5 CVE-2017-0375 The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_… Tor 0.3.0.8+ Fix from $1,9502017-06-09 HIGH 7.5 CVE-2017-0376 The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_… Debian Linux 0.3.0.8+ Fix from $1,9502017-06-09 MEDIUM 6.5 CVE-2017-9499 In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of ser… Imagemagick Patch available Fix from $1,6002017-06-07 MEDIUM 6.5 CVE-2017-9500 In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of ser… Imagemagick Patch available Fix from $1,6002017-06-07