Browse CVEs

MEDIUM 5.5 CVE-2017-5973 The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (i… Debian Linux after 2.8.1.1 Fix from $1,6002017-03-27 CRITICAL 9.8 CVE-2017-5511EPSS 5% coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer ove… Debian Linux 6.9.7-3 / 7.0.4-3+ Fix from $2,3002017-03-24 HIGH 7.8 CVE-2017-5510 coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write. Debian Linux 6.9.7-4 / 7.0.4-4+ Fix from $1,9502017-03-24 HIGH 7.5 CVE-2017-5507EPSS 6% Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consump… Debian Linux Patch available Fix from $1,9502017-03-24 HIGH 7.8 CVE-2017-5506 Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file. Debian Linux Patch available Fix from $1,9502017-03-24 HIGH 7.5 CVE-2016-10149EPSS 5% XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request o… Debian Linux after 4.4.0 Fix from $1,9502017-03-24 MEDIUM 5.5 CVE-2016-9556 The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds he… Debian Linux Patch available Fix from $1,6002017-03-23 HIGH 7.8 CVE-2016-9774 The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 1… Debian Linux Mitigation only Fix from $1,9502017-03-23 HIGH 7.8 CVE-2016-9775 The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on Debian jessie, before 6.0.35-1u… Debian Linux Mitigation only Fix from $1,9502017-03-23 MEDIUM 5.5 CVE-2017-5987 The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial … Debian Linux after 2.8.1.1 Fix from $1,6002017-03-20 MEDIUM 5.5 CVE-2017-6831 Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1,… Debian Linux Patch available Fix from $1,6002017-03-20 MEDIUM 5.5 CVE-2017-6832 Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0… Debian Linux Patch available Fix from $1,6002017-03-20 MEDIUM 5.5 CVE-2017-6834 Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1… Debian Linux Patch available Fix from $1,6002017-03-20 MEDIUM 5.5 CVE-2017-6836 Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, … Debian Linux Patch available Fix from $1,6002017-03-20 HIGH 8.8 CVE-2017-7178 CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitr… Debian Linux 1.3.14+ Fix from $1,9502017-03-18 HIGH 7.5 CVE-2017-6960 An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the load_apng function a… Debian Linux Mitigation only Fix from $1,9502017-03-17 MEDIUM 6.5 CVE-2017-5856 Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a d… Debian Linux after 2.8.1.1 Fix from $1,6002017-03-16 HIGH 7.4 CVE-2017-5617 The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF)… Debian Linux Patch available Fix from $1,9502017-03-16 MEDIUM 6.5 CVE-2017-5667 The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial … Debian Linux after 2.8.1.1 Fix from $1,6002017-03-16 MEDIUM 5.5 CVE-2016-10246 Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause a deni… Debian Linux after 1.10 Fix from $1,6002017-03-16 MEDIUM 5.5 CVE-2016-10247 Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows remote attackers to cause … Debian Linux after 1.10 Fix from $1,6002017-03-16 CRITICAL 9.8 CVE-2017-5522 Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to caus… Debian Linux after 6.0.5 Fix from $2,3002017-03-15 CRITICAL 9.8 CVE-2016-10195EPSS 7% The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_l… Debian Linux after 2.1.5 Fix from $2,3002017-03-15 HIGH 7.5 CVE-2016-10196EPSS 5% Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial o… Debian Linux 45.9.0 / 52.1.0+ Fix from $1,9502017-03-15 HIGH 7.5 CVE-2016-10197EPSS 5% The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty… Debian Linux after 2.1.5 Fix from $1,9502017-03-15 MEDIUM 6.5 CVE-2017-5525 Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumpt… Debian Linux after 2.8.1.1 Fix from $1,6002017-03-15 MEDIUM 6.5 CVE-2017-5526 Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consum… Debian Linux after 2.8.1.1 Fix from $1,6002017-03-15 MEDIUM 6.5 CVE-2017-5579 Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denia… Debian Linux after 2.8.1.1 Fix from $1,6002017-03-15 MEDIUM 6.0 CVE-2016-10155 Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memo… Debian Linux after 2.8.1.1 Fix from $1,6002017-03-15 HIGH 7.8 CVE-2017-6060EPSS 7% Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to have unspecified impact via… Debian Linux No fix yet Fix from $1,9502017-03-15