Browse CVEs

MEDIUM 5.6 CVE-2017-5753EPSS 93% Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker wi… Ubuntu Linux 8.5.9 / 12.5.8+ Fix from $1,6002018-01-04 MEDIUM 6.5 CVE-2017-18008 In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. Ubuntu Linux No fix yet Fix from $1,6002018-01-01 MEDIUM 6.5 CVE-2017-17914 In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of s… Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 MEDIUM 6.5 CVE-2017-17934 ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSL… Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 HIGH 8.8 CVE-2017-17879 In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculati… Ubuntu Linux Mitigation only Fix from $1,9502017-12-27 MEDIUM 6.5 CVE-2017-17881 In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a de… Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 MEDIUM 6.5 CVE-2017-17882 In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a de… Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 MEDIUM 6.5 CVE-2017-17884 In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause … Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 MEDIUM 6.5 CVE-2017-17885 In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a … Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 MEDIUM 6.5 CVE-2017-17886 In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause… Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 MEDIUM 6.5 CVE-2017-17887 In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to ca… Ubuntu Linux Mitigation only Fix from $1,6002017-12-27 HIGH 7.5 CVE-2017-17818 In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loo… Ubuntu Linux No fix yet Fix from $1,9502017-12-21 MEDIUM 5.5 CVE-2017-17810 In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mi… Ubuntu Linux Patch available Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17811 In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in … Ubuntu Linux No fix yet Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17812 In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denia… Ubuntu Linux Patch available Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17813 In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of … Ubuntu Linux No fix yet Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17814 In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack. Ubuntu Linux No fix yet Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17815 In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service at… Ubuntu Linux Patch available Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17816 In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack. Ubuntu Linux No fix yet Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17817 In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack. Ubuntu Linux No fix yet Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17819 In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of… Ubuntu Linux Patch available Fix from $1,6002017-12-21 MEDIUM 5.5 CVE-2017-17820 In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service att… Ubuntu Linux No fix yet Fix from $1,6002017-12-21 MEDIUM 6.5 CVE-2017-17680 In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a de… Ubuntu Linux Patch available Fix from $1,6002017-12-14 MEDIUM 6.5 CVE-2017-17681 In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to ca… Ubuntu Linux No fix yet Fix from $1,6002017-12-14 MEDIUM 6.5 CVE-2017-17682 In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause … Ubuntu Linux No fix yet Fix from $1,6002017-12-14 MEDIUM 5.5 CVE-2017-17669 There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file w… Ubuntu Linux No fix yet Fix from $1,6002017-12-13 CRITICAL 9.8 CVE-2017-17499 ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp. Ubuntu Linux 6.9.9-24 / 7.0.7-12+ Fix from $2,3002017-12-11 MEDIUM 6.5 CVE-2017-17504 ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage. Ubuntu Linux 6.9.9-24 / 7.0.7-12+ Fix from $1,6002017-12-11 HIGH 7.8 CVE-2017-13168 An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233. Ubuntu Linux No fix yet Fix from $1,9502017-12-06 CRITICAL 9.8 CVE-2017-14746EPSS 10% Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request. Ubuntu Linux 4.5.0 / 4.5.15+ Fix from $2,3002017-11-27