Browse CVEs

MEDIUM 5.5 CVE-2017-14859 An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentat… Ubuntu Linux No fix yet Fix from $1,6002017-09-29 MEDIUM 5.5 CVE-2017-14862 An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fa… Ubuntu Linux No fix yet Fix from $1,6002017-09-29 MEDIUM 5.5 CVE-2017-14864 An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and… Ubuntu Linux No fix yet Fix from $1,6002017-09-29 CRITICAL 9.8 CVE-2017-14626 ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c. Ubuntu Linux Patch available Fix from $2,3002017-09-21 CRITICAL 9.8 CVE-2017-14624 ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c. Ubuntu Linux Patch available Fix from $2,3002017-09-21 CRITICAL 9.8 CVE-2017-14625 ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c. Ubuntu Linux Patch available Fix from $2,3002017-09-21 HIGH 8.1 CVE-2017-14607 In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploi… Ubuntu Linux Patch available Fix from $1,9502017-09-20 CRITICAL 9.8 CVE-2017-14532 ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c. Ubuntu Linux Patch available Fix from $2,3002017-09-18 MEDIUM 6.5 CVE-2017-14531 ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c. Ubuntu Linux Patch available Fix from $1,6002017-09-18 MEDIUM 6.5 CVE-2017-14533 ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c. Ubuntu Linux Patch available Fix from $1,6002017-09-18 MEDIUM 6.5 CVE-2017-14341 ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file. Ubuntu Linux Patch available Fix from $1,6002017-09-12 MEDIUM 6.5 CVE-2017-14342 ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file. Ubuntu Linux No fix yet Fix from $1,6002017-09-12 MEDIUM 6.5 CVE-2017-14343 ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file. Ubuntu Linux Patch available Fix from $1,6002017-09-12 MEDIUM 6.5 CVE-2017-14325 In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to caus… Ubuntu Linux Patch available Fix from $1,6002017-09-12 MEDIUM 6.5 CVE-2017-14326 In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a den… Ubuntu Linux Patch available Fix from $1,6002017-09-12 MEDIUM 5.5 CVE-2017-14228 In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dereference. … Ubuntu Linux No fix yet Fix from $1,6002017-09-09 MEDIUM 6.5 CVE-2017-14172 In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a … Ubuntu Linux Patch available Fix from $1,6002017-09-07 MEDIUM 6.5 CVE-2017-14173 In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(d… Ubuntu Linux Patch available Fix from $1,6002017-09-07 MEDIUM 6.5 CVE-2017-14174 In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumpti… Ubuntu Linux Patch available Fix from $1,6002017-09-07 MEDIUM 6.5 CVE-2017-14175 In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When … Ubuntu Linux Patch available Fix from $1,6002017-09-07 MEDIUM 6.5 CVE-2017-12691 The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a craf… Ubuntu Linux Patch available Fix from $1,6002017-09-01 MEDIUM 6.5 CVE-2017-12692 The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a cr… Ubuntu Linux Patch available Fix from $1,6002017-09-01 MEDIUM 6.5 CVE-2017-12693 The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a craf… Ubuntu Linux Patch available Fix from $1,6002017-09-01 MEDIUM 6.5 CVE-2017-14060 In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cau… Ubuntu Linux Patch available Fix from $1,6002017-08-31 MEDIUM 6.5 CVE-2017-13769 The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-r… Ubuntu Linux 6.9.9-11+ Fix from $1,6002017-08-30 HIGH 7.5 CVE-2017-12836EPSS 6% CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a cr… Ubuntu Linux Patch available Fix from $1,9502017-08-24 MEDIUM 6.5 CVE-2017-11683 There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denia… Ubuntu Linux Mitigation only Fix from $1,6002017-07-27 HIGH 8.8 CVE-2015-1332 The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a … Ubuntu Linux after 1.9.0 Fix from $1,9502017-07-25 HIGH 7.8 CVE-2017-7980 Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary… Ubuntu Linux Patch available Fix from $1,9502017-07-25 HIGH 7.5 CVE-2017-11591 There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted in… Ubuntu Linux No fix yet Fix from $1,9502017-07-24