Browse CVEs

HIGH 7.8 CVE-2017-11714 psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of ser… Debian Linux Patch available Fix from $1,9502017-07-28 HIGH 7.8 CVE-2017-9611 The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer… Debian Linux No fix yet Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9726 The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer… Debian Linux Mitigation only Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9727 The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-base… Debian Linux No fix yet Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9739 The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer… Debian Linux No fix yet Fix from $1,9502017-07-26 MEDIUM 5.5 CVE-2017-11434 The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read a… Debian Linux after 2.9.1 Fix from $1,6002017-07-25 MEDIUM 5.5 CVE-2017-9865 The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over… Debian Linux Mitigation only Fix from $1,6002017-06-25 MEDIUM 5.5 CVE-2017-8312 Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a craft… Debian Linux 2.2.6+ Fix from $1,6002017-05-23 HIGH 7.5 CVE-2017-7483 Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible i… Debian Linux Patch available Fix from $1,9502017-05-02 MEDIUM 6.5 CVE-2017-8362 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash… Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8363 The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and ap… Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 6.5 CVE-2017-8365 The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) … Debian Linux Patch available Fix from $1,6002017-04-30 MEDIUM 5.5 CVE-2017-7718 hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and … Debian Linux after 2.8.1.1 Fix from $1,6002017-04-20 MEDIUM 5.5 CVE-2017-7697 In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. Debian Linux after 0.1.8 Fix from $1,6002017-04-11 MEDIUM 5.5 CVE-2016-5322 The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a c… Debian Linux after 4.0.6 Fix from $1,6002017-04-11 MEDIUM 5.5 CVE-2017-7608 The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buf… Debian Linux Patch available Fix from $1,6002017-04-09 MEDIUM 5.5 CVE-2017-7610 The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and applica… Debian Linux Patch available Fix from $1,6002017-04-09 MEDIUM 5.5 CVE-2017-7611 The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and … Debian Linux Patch available Fix from $1,6002017-04-09 MEDIUM 5.5 CVE-2017-7612 The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and app… Debian Linux Patch available Fix from $1,6002017-04-09 MEDIUM 6.5 CVE-2017-5667 The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial … Debian Linux after 2.8.1.1 Fix from $1,6002017-03-16 CRITICAL 9.8 CVE-2016-10195EPSS 7% The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_l… Debian Linux after 2.1.5 Fix from $2,3002017-03-15 HIGH 7.5 CVE-2016-10197EPSS 5% The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty… Debian Linux after 2.1.5 Fix from $1,9502017-03-15 HIGH 7.5 CVE-2017-6800 An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, r… Debian Linux after 1.9.1 Fix from $1,9502017-03-10 HIGH 7.5 CVE-2017-6801 An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef. Debian Linux after 1.9.1 Fix from $1,9502017-03-10 HIGH 7.5 CVE-2017-6802 An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to Decomp… Debian Linux after 1.9.1 Fix from $1,9502017-03-10 MEDIUM 5.5 CVE-2016-5315 The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a c… Debian Linux after 4.0.6 Fix from $1,6002017-03-07 HIGH 7.8 CVE-2016-10244 The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote atta… Debian Linux 2.7.1+ Fix from $1,9502017-03-06 MEDIUM 5.5 CVE-2017-6500 An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read. Debian Linux Patch available Fix from $1,6002017-03-06 HIGH 7.5 CVE-2017-5356 Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence… Debian Linux 0.8.21+ Fix from $1,9502017-03-03 HIGH 7.8 CVE-2017-6301 An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads." Debian Linux after 1.9 Fix from $1,9502017-02-24