Browse CVEs

MEDIUM 6.5 CVE-2017-14528 The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply … Debian Linux No fix yet Fix from $1,6002017-09-18 HIGH 7.5 CVE-2017-13711 Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEM… Debian Linux after 2.10.1 Fix from $1,9502017-09-01 MEDIUM 6.5 CVE-2017-13737 There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack. Debian Linux Patch available Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-12877 Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of servi… Debian Linux 6.9.9-6 / 7.0.6-6+ Fix from $1,6002017-08-28 HIGH 8.8 CVE-2017-12936EPSS 25% The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting. Debian Linux Patch available Fix from $1,9502017-08-18 HIGH 7.8 CVE-2017-9612 The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and … Debian Linux No fix yet Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9527 The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and applicati… Debian Linux after 1.2.0 Fix from $1,9502017-06-11 CRITICAL 9.8 CVE-2017-2518EPSS 5% An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. w… Debian Linux 3.2.2 / 10.2.1+ Fix from $2,3002017-05-22 MEDIUM 5.5 CVE-2017-8846 The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and applicati… Debian Linux Patch available Fix from $1,6002017-05-08 HIGH 7.5 CVE-2017-5194 Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message. Debian Linux 0.8.21+ Fix from $1,9502017-03-03 MEDIUM 5.5 CVE-2016-9401 popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. Debian Linux 4.4+ Fix from $1,6002017-01-23 MEDIUM 5.5 CVE-2016-7906 magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file. Debian Linux Patch available Fix from $1,6002017-01-18 CRITICAL 9.8 CVE-2015-8871 Use-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact v… Debian Linux after 2.1.0 Fix from $2,3002016-09-21 MEDIUM 5.9 CVE-2016-7180 epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant… Debian Linux Patch available Fix from $1,6002016-09-09 CRITICAL 9.8 CVE-2015-8949 Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call … Debian Linux Patch available Fix from $2,3002016-08-19 CRITICAL 9.8 CVE-2014-9906EPSS 6% Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary c… Debian Linux after 4.028 Fix from $2,3002016-08-19 MEDIUM 5.0 CVE-2013-4560EPSS 5% Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) via unspec… Debian Linux 1.4.33+ Fix from $1,6002013-11-20 HIGH 7.5 CVE-2013-2873 Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified o… Debian Linux after 28.0.1500.70 Fix from $1,9502013-07-10 HIGH 7.5 CVE-2013-2860 Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified … Debian Linux after 27.0.1453.109 Fix from $1,9502013-06-05 HIGH 7.5 CVE-2013-2857 Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified … Debian Linux after 27.0.1453.109 Fix from $1,9502013-06-05 HIGH 7.5 CVE-2013-2858 Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of ser… Debian Linux after 27.0.1453.109 Fix from $1,9502013-06-05