Browse CVEs

HIGH 7.8 CVE-2017-17786 In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-… Debian Linux Mitigation only Fix from $1,9502017-12-20 MEDIUM 5.5 CVE-2017-17788 In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string. Debian Linux Mitigation only Fix from $1,6002017-12-20 HIGH 8.8 CVE-2017-17782 In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs chunk allocation. Debian Linux Mitigation only Fix from $1,9502017-12-20 HIGH 7.8 CVE-2017-17784 In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling o… Debian Linux Mitigation only Fix from $1,9502017-12-20 HIGH 7.8 CVE-2017-17785 In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c. Debian Linux Mitigation only Fix from $1,9502017-12-20 HIGH 7.5 CVE-2017-17783 In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8. Debian Linux Mitigation only Fix from $1,9502017-12-20 HIGH 8.8 CVE-2017-17511 KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attac… Debian Linux Mitigation only Fix from $1,9502017-12-14 HIGH 8.8 CVE-2017-17514 boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote … Debian Linux Mitigation only Fix from $1,9502017-12-14 HIGH 8.8 CVE-2017-17515 etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might all… Debian Linux Mitigation only Fix from $1,9502017-12-14 HIGH 8.8 CVE-2017-17520 tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might a… Tin Mitigation only Fix from $1,9502017-12-14 HIGH 8.8 CVE-2017-17527 delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate strings before launching the program specified by the BROWSER environment variable… Debian Linux Mitigation only Fix from $1,9502017-12-14 MEDIUM 5.9 CVE-2017-1000385EPSS 22% The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decry… Debian Linux Mitigation only Fix from $1,6002017-12-12 CRITICAL 9.8 CVE-2017-17480EPSS 5% In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bou… Debian Linux Mitigation only Fix from $2,3002017-12-08 HIGH 8.1 CVE-2017-8028 In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP Bind… Debian Linux Mitigation only Fix from $1,9502017-11-27 HIGH 7.5 CVE-2017-16944EPSS 63% The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinite loop an… Debian Linux No fix yet Fix from $1,9502017-11-25 HIGH 7.8 CVE-2017-2896 An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a mem… Debian Linux Mitigation only Fix from $1,9502017-11-20 HIGH 7.8 CVE-2017-2919 An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause … Debian Linux Mitigation only Fix from $1,9502017-11-20 HIGH 7.1 CVE-2017-16899 An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with… Debian Linux Mitigation only Fix from $1,9502017-11-20 HIGH 7.8 CVE-2017-1000229 Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service. Debian Linux No fix yet Fix from $1,9502017-11-17 HIGH 8.8 CVE-2017-16352EPSS 15% GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the Descri… Debian Linux No fix yet Fix from $1,9502017-11-01 MEDIUM 6.5 CVE-2017-16353EPSS 14% GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c fil… Debian Linux No fix yet Fix from $1,6002017-11-01 HIGH 7.8 CVE-2013-6049 apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unknown vectors. Debian Linux Mitigation only Fix from $1,9502017-10-20 MEDIUM 5.5 CVE-2017-15642 In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file. Debian Linux Mitigation only Fix from $1,6002017-10-19 HIGH 8.8 CVE-2017-15565 In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document. Debian Linux No fix yet Fix from $1,9502017-10-17 MEDIUM 5.5 CVE-2017-15370 There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of… Debian Linux No fix yet Fix from $1,6002017-10-16 MEDIUM 5.5 CVE-2017-15371 There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a… Debian Linux No fix yet Fix from $1,6002017-10-16 MEDIUM 5.5 CVE-2017-15372 There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will le… Debian Linux No fix yet Fix from $1,6002017-10-16 HIGH 8.8 CVE-2017-2887 An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can c… Debian Linux Mitigation only Fix from $1,9502017-10-11 HIGH 7.5 CVE-2017-14975 The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is n… Debian Linux No fix yet Fix from $1,9502017-10-02 HIGH 7.5 CVE-2017-14977 The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of… Debian Linux No fix yet Fix from $1,9502017-10-02