Browse CVEs

HIGH 7.8 CVE-2017-12082 An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file wit… Debian Linux No fix yet Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-12086 An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source 3d creation suite. A speciall… Debian Linux No fix yet Fix from $1,9502018-04-24 MEDIUM 5.5 CVE-2016-9601 ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image functio… Debian Linux 9.21+ Fix from $1,6002018-04-24 CRITICAL 9.8 CVE-2018-10191 In versions of mruby up to and including 1.4.0, an integer overflow exists in src/vm.c::mrb_vm_exec() when handling OP_GETUPVAR in the presence of de… Debian Linux after 1.4.0 Fix from $2,3002018-04-17 HIGH 7.5 CVE-2018-1084 corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c. Debian Linux 2.4.4+ Fix from $1,9502018-04-12 MEDIUM 5.5 CVE-2017-18233 An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers… Debian Linux 2.4.4+ Fix from $1,6002018-03-15 MEDIUM 6.5 CVE-2018-8098 Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to … Debian Linux 0.26.2+ Fix from $1,6002018-03-14 HIGH 7.5 CVE-2018-1000127 memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks … Debian Linux 1.4.37+ Fix from $1,9502018-03-13 HIGH 7.5 CVE-2018-1000098 Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear t… Debian Linux after 2.7.1 Fix from $1,9502018-03-13 CRITICAL 9.8 CVE-2018-7225EPSS 6% An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to a… Debian Linux No fix yet Fix from $2,3002018-02-19 CRITICAL 9.8 CVE-2017-18187 In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity… Debian Linux 2.7.0+ Fix from $2,3002018-02-14 MEDIUM 5.5 CVE-2017-18043 Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash). Debian Linux after 2.10.1 Fix from $1,6002018-01-31 HIGH 8.8 CVE-2018-6315 The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds re… Debian Linux after 0.4.8 Fix from $1,9502018-01-25 CRITICAL 9.8 CVE-2017-12177 xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to cr… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 CRITICAL 9.8 CVE-2017-12179 xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X s… Debian Linux 1.19.5+ Fix from $2,3002018-01-24 MEDIUM 6.5 CVE-2018-5785 In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote a… Debian Linux No fix yet Fix from $1,6002018-01-19 MEDIUM 6.5 CVE-2018-5294 In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers coul… Debian Linux Mitigation only Fix from $1,6002018-01-08 HIGH 8.8 CVE-2017-1000422 Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential … Debian Linux after 2.36.8 Fix from $1,9502018-01-02 HIGH 8.8 CVE-2017-1000450 In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. … Debian Linux after 3.3.0 Fix from $1,9502018-01-02 HIGH 7.5 CVE-2017-16612EPSS 5% libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with program… Debian Linux after 1.1.14 Fix from $1,9502017-12-01 HIGH 7.8 CVE-2017-1000229 Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service. Debian Linux No fix yet Fix from $1,9502017-11-17 MEDIUM 5.5 CVE-2017-15873 The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access vio… Debian Linux Patch available Fix from $1,6002017-10-24 HIGH 8.8 CVE-2017-14167 Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary … Debian Linux after 2.10.2 Fix from $1,9502017-09-08 HIGH 7.8 CVE-2017-2870 An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially… Debian Linux No fix yet Fix from $1,9502017-09-05 CRITICAL 9.8 CVE-2017-14062 Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possib… Debian Linux 2.0.4+ Fix from $2,3002017-08-31 HIGH 8.8 CVE-2017-5208 Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a cra… Debian Linux 0.31.1+ Fix from $1,9502017-08-22 HIGH 8.8 CVE-2017-12863 In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from r… Debian Linux after 3.3.0 Fix from $1,9502017-08-15 HIGH 8.8 CVE-2017-12864 In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is… Debian Linux after 3.3.0 Fix from $1,9502017-08-15 HIGH 7.8 CVE-2017-9835 The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (heap-based buffer o… Debian Linux No fix yet Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9776 Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of … Debian Linux after 0.55.0 Fix from $1,9502017-06-22