Browse CVEs

HIGH 8.8 CVE-2018-17100 An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) o… Debian Linux Patch available Fix from $1,9502018-09-16 HIGH 7.5 CVE-2018-14337 The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory ac… Debian Linux No fix yet Fix from $1,9502018-07-17 HIGH 8.1 CVE-2018-10887 A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c fi… Debian Linux 0.27.3+ Fix from $1,9502018-07-10 CRITICAL 9.8 CVE-2017-7657EPSS 16% In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transf… Debian Linux 9.3.24 / 9.4.11+ Fix from $2,3002018-06-26 HIGH 8.8 CVE-2018-12264 Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.… Debian Linux No fix yet Fix from $1,9502018-06-13 HIGH 8.8 CVE-2018-12265 Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp. Debian Linux No fix yet Fix from $1,9502018-06-13 CRITICAL 9.8 CVE-2018-5159EPSS 21% An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of… Debian Linux 52.8.0 / 60.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5095 An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This result… Debian Linux 52.6.0 / 58.0+ Fix from $2,3002018-06-11 HIGH 7.8 CVE-2017-2901 An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially craf… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2902 An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially craft… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2903 An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially craft… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2904 An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially … Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2905 An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially craft… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2906 An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2907 An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2908 An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2918 An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .b… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2899 An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially craf… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-2900 An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially craft… Debian Linux No fix yet Fix from $1,9502018-04-24 MEDIUM 5.9 CVE-2017-2837 An exploitable denial of service vulnerability exists within the handling of security data in FreeRDP 2.0.0-beta1+android11. A specially crafted chal… Debian Linux Mitigation only Fix from $1,6002018-04-24 MEDIUM 5.9 CVE-2017-2838 An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted … Debian Linux Mitigation only Fix from $1,6002018-04-24 HIGH 8.8 CVE-2017-14441 An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2. A specially crafted ICO image can ca… Debian Linux Mitigation only Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12099 An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.78c. A spe… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12100 An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c. A specially c… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12101 An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite v2.78c. A… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12102 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially craf… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12103 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font into a curve… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12104 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object. A specially crafted … Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12105 An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mes… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12081 An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially cra… Debian Linux No fix yet Fix from $1,9502018-04-24