Browse CVEs

HIGH 8.8 CVE-2021-21855 Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library … Debian Linux No fix yet Fix from $1,9502021-08-18 HIGH 7.8 CVE-2021-32490 A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application … Debian Linux after 3.5.28 Fix from $1,9502021-06-24 HIGH 7.8 CVE-2021-32492 A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to appl… Debian Linux after 3.5.28 Fix from $1,9502021-06-24 HIGH 7.8 CVE-2021-32493 A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to applic… Debian Linux after 3.5.28 Fix from $1,9502021-06-24 MEDIUM 6.1 CVE-2021-3507 A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block… Debian Linux after 6.0.0 Fix from $1,6002021-05-06 CRITICAL 9.8 CVE-2021-20204 A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This … Debian Linux Mitigation only Fix from $2,3002021-05-06 HIGH 7.8 CVE-2021-3498 GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files. Debian Linux 1.18.4+ Fix from $1,9502021-04-19 HIGH 7.5 CVE-2021-20276 A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service. Debian Linux 3.0.32+ Fix from $1,9502021-03-09 HIGH 7.5 CVE-2021-20275 A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service. Debian Linux 3.0.32+ Fix from $1,9502021-03-09 HIGH 7.8 CVE-2021-3410 A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arb… Debian Linux No fix yet Fix from $1,9502021-02-23 MEDIUM 6.5 CVE-2020-15564 An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOP… Debian Linux after 4.13.1 Fix from $1,6002020-07-07 MEDIUM 6.5 CVE-2020-15563 An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests… Debian Linux after 4.13.1 Fix from $1,6002020-07-07 CRITICAL 9.8 CVE-2013-7087 ClamAV before 0.97.7 has WWPack corrupt heap memory Debian Linux 0.97.7+ Fix from $2,3002019-11-15 CRITICAL 9.8 CVE-2013-2739 MiniDLNA has heap-based buffer overflow Debian Linux 1.1.0+ Fix from $2,3002019-11-01 MEDIUM 5.3 CVE-2010-0749 Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame. Debian Linux 1.92+ Fix from $1,6002019-10-30 MEDIUM 6.4 CVE-2019-15946 OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. Debian Linux after 0.19.0 Fix from $1,6002019-09-05 MEDIUM 6.4 CVE-2019-15945 OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. Debian Linux after 0.19.0 Fix from $1,6002019-09-05 CRITICAL 9.8 CVE-2019-13451 In Xymon through 4.3.28, a buffer overflow vulnerability exists in history.c. Debian Linux after 4.3.28 Fix from $2,3002019-08-27 CRITICAL 9.8 CVE-2019-13452 In Xymon through 4.3.28, a buffer overflow vulnerability exists in reportlog.c. Debian Linux after 4.3.28 Fix from $2,3002019-08-27 CRITICAL 9.8 CVE-2019-13484 In Xymon through 4.3.28, a buffer overflow exists in the status-log viewer CGI because of   expansion in appfeed.c. Debian Linux after 4.3.28 Fix from $2,3002019-08-27 HIGH 7.8 CVE-2019-15296 An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The faad_resetbits function in libfaad/bits.c is affected by a buffer ove… Debian Linux Patch available Fix from $1,9502019-08-21 MEDIUM 5.5 CVE-2019-1010069 moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers to cause a denial of service attack via a crafted f… Debian Linux No fix yet Fix from $1,6002019-07-18 CRITICAL 9.8 CVE-2019-7165 A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code. Debian Linux No fix yet Fix from $2,3002019-07-03 HIGH 7.8 CVE-2019-7524 In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to… Debian Linux 2.2.36.3 / 2.3.5.1+ Fix from $1,9502019-03-28 MEDIUM 6.8 CVE-2018-20340 Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could u… Debian Linux Patch available Fix from $1,6002019-03-21 CRITICAL 9.8 CVE-2018-20182EPSS 8% rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results… Debian Linux after 1.8.3 Fix from $2,3002019-03-15 HIGH 7.8 CVE-2019-8383 An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be trigg… Debian Linux after 2.1 Fix from $1,9502019-02-17 HIGH 7.8 CVE-2018-20761 GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c in libgpac_static.a. Debian Linux after 0.7.1 Fix from $1,9502019-02-06 HIGH 7.8 CVE-2018-20762 GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box… Debian Linux after 0.7.1 Fix from $1,9502019-02-06 CRITICAL 9.8 CVE-2018-19873 An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data. Debian Linux 5.11.3+ Fix from $2,3002018-12-26