Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8668 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:27:41.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/15/9 - https://security.gentoo.org/glsa/201611-11 - http://www.openwall.com/lists/oss-security/2016/10/14/8 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02501.
ttp://www.openwall.com/lists/oss-security/2016/10/14/8 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02501.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.securityfocus.com/bid/93566
CVE ID: CVE-2016-8669 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:27:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201611-11 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3592fe0c919cf27a81d8e9f9b4f269553418bb01 -
ty.gentoo.org/glsa/201611-11 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3592fe0c919cf27a81d8e9f9b4f269553418bb01 - http://www.openwall.com/lists/oss-security/2016/10/14/9 - https://access.redhat.com/errata/RHSA-2017:2392 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.securityfocus.com/bid/93563 - http://www.openwall.com/lists/oss-security/2016/10/15/5 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2016-8670 State: PUBLISHED Published: 2017-01-04T20:00:00 Last Updated: 2024-08-06T02:27:41.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - http://www.securityfocus.com/bid/93594 - https://github.com/libgd/libgd/commit/531108719
//www.php.net/ChangeLog-7.php - http://www.securityfocus.com/bid/93594 - https://github.com/libgd/libgd/commit/53110871935244816bbb9d131da0bccff734bfe9 - http://www.openwall.com/lists/oss-security/2016/10/15/1 - http://www.debian.org/security/2016/dsa-3693 - https://bugs.php.net/bug.php?id=73280 - http://www.php.net/ChangeLog-5.php - https://support.f5.com/csp/article/K21336065?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2016-8671 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T02:27:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6887. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/15/8 - http://www.openwall.com/lists/oss-security/2016/10/15/2 - http://www.securityfocus.com/bid/95439 - https://blog.fuzzing-project.org/54-U
all.com/lists/oss-security/2016/10/15/2 - http://www.securityfocus.com/bid/95439 - https://blog.fuzzing-project.org/54-Update-on-MatrixSSL-miscalculation-CVE-2016-8671%2C-incomplete-fix-for-CVE-2016-6887.html
CVE ID: CVE-2016-8672 State: PUBLISHED Published: 2016-11-23T11:00:00 Last Updated: 2024-08-06T02:27:41.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.2.17), SIMATIC S7-300 PN/DP CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants) (All versions). The integrated web server delivers cookies without the "secure" flag. Modern browsers interpreting the flag would mitigate potential data leakage in case of clear text transmission. Additiona
odern browsers interpreting the flag would mitigate potential data leakage in case of clear text transmission. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-603476.pdf
CVE ID: CVE-2016-8673 State: PUBLISHED Published: 2016-11-23T11:00:00 Last Updated: 2024-08-06T02:27:41.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.2.17), SIMATIC S7-300 PN/DP CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP CPU family (incl. SIPLUS variants) (All versions). The integrated web server at port 80/TCP or port 443/TCP of the affected devices could allow remote attackers to perform actions with the permissions of an authenticated user, provided the ta
d devices could allow remote attackers to perform actions with the permissions of an authenticated user, provided the targeted user has an active session and is induced to trigger the malicious request. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-603476.pdf
CVE ID: CVE-2016-8674 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1385685 - https://bugs.ghostscript.com/show_bug.cgi?id=697019 - http://www.securityfocus.com/bid/93127 - http://www.debian.org/security/2017/dsa-3797 - http://www.openwall.com/lists/oss-security/2016/10/16/8 - https://bugs.ghostscript.com/show_bug.cg
urity/2017/dsa-3797 - http://www.openwall.com/lists/oss-security/2016/10/16/8 - https://bugs.ghostscript.com/show_bug.cgi?id=697015 - http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=1e03c06456d997435019fb3526fa2d4be7dbc6ec - https://blogs.gentoo.org/ago/2016/09/22/mupdf-use-after-free-in-pdf_to_num-pdf-object-c/
CVE ID: CVE-2016-8675 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file, possibly related to startcode sequences during m4v detection. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/09/07/libav-null-pointer-dereference-in-get_vlc2_get_bits_h/ - http://www.securityfocus.com/bid/93468 - https://github.com/libav/libav/commit/e5b019725f53b79159931d3a7317107cbbfd0860 - http://www.open
tyfocus.com/bid/93468 - https://github.com/libav/libav/commit/e5b019725f53b79159931d3a7317107cbbfd0860 - http://www.openwall.com/lists/oss-security/2016/10/16/13
CVE ID: CVE-2016-8676 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted mp3 file. NOTE: this issue exists due to an incomplete fix for CVE-2016-8675. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/09/07/libav-null-pointer-dereference-in-get_vlc2_get_bits_h/ - http://www.securityfocus.com/bid/93468 - http://www.openwall.com/lists/oss-security/2016/10/16/13 - http://www.openwall.com/lists/oss-secu
yfocus.com/bid/93468 - http://www.openwall.com/lists/oss-security/2016/10/16/13 - http://www.openwall.com/lists/oss-security/2016/12/04/3 - https://blogs.gentoo.org/ago/2016/12/01/libav-multiple-crashes-from-the-undefined-behavior-sanitizer/
CVE ID: CVE-2016-8677 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/16/1 - http://lists.opensuse.org/opensuse-updates/2016-10/msg00107.html - https://blogs.gentoo.org/ago/2016/10/07/imagemagick-memory-allocate-failure-in-acquirequantumpixels-quantum-c/ - http://www.securityf
.gentoo.org/ago/2016/10/07/imagemagick-memory-allocate-failure-in-acquirequantumpixels-quantum-c/ - http://www.securityfocus.com/bid/93598 - https://github.com/ImageMagick/ImageMagick/issues/268 - https://bugzilla.redhat.com/show_bug.cgi?id=1385698 - https://github.com/ImageMagick/ImageMagick/commit/6e48aa92ff4e6e95424300ecd52a9ea453c19c60 - http://www.debian.org/security/2016/dsa-3726
CVE ID: CVE-2016-8678 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted file. NOTE: the vendor says "This is a Q64 issue and we do not support Q64." Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1385694 - http://www.openwall.com/lists/oss-security/2016/12/08/18 - http://www.openwall.com/lists/oss-security/2016/10/16/2 - http://www.securityfocus.com/bid/935
-security/2016/12/08/18 - http://www.openwall.com/lists/oss-security/2016/10/16/2 - http://www.securityfocus.com/bid/93599 - https://github.com/ImageMagick/ImageMagick/issues/272
CVE ID: CVE-2016-8679 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1385689 - https://blogs.gentoo.org/ago/2016/10/06/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_size_of_val-dwarf_util-c/ - http://www.securityfocus.com/bid/93601 - http://www.openwall.com/lists/oss-secur
-_dwarf_get_size_of_val-dwarf_util-c/ - http://www.securityfocus.com/bid/93601 - http://www.openwall.com/lists/oss-security/2016/10/16/3
CVE ID: CVE-2016-8680 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1385686 - http://www.openwall.com/lists/oss-security/2016/10/16/4 - https://sourceforge.net/p/libdwarf/code/ci/268c1f18d1d28612af3b72d7c670076b1b88e51c/tree/libdwarf/dwarf_util.c?diff=0b28b923c3bd9827d1d904fe
net/p/libdwarf/code/ci/268c1f18d1d28612af3b72d7c670076b1b88e51c/tree/libdwarf/dwarf_util.c?diff=0b28b923c3bd9827d1d904feed2abadde4fa5de2 - http://www.securityfocus.com/bid/93595 - https://blogs.gentoo.org/ago/2016/10/04/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_abbrev_for_code-dwarf_util-c/
CVE ID: CVE-2016-8681 State: PUBLISHED Published: 2017-02-15T21:00:00 Last Updated: 2024-08-06T02:27:41.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/16/5 - http://www.securityfocus.com/bid/93592 - https://blogs.gentoo.org/ago/2016/10/06/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_abbrev_for_code-dwarf_util-c-2/ - https://bugzilla.redhat.com/s
/10/06/libdwarf-heap-based-buffer-overflow-in-_dwarf_get_abbrev_for_code-dwarf_util-c-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=1385690
CVE ID: CVE-2016-8682 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.openwall.com/lists/oss-security/2016/10/16/6 - http://www.securityfocus.com/bid/93597 - https://bugzilla.redhat.com/show_bug.cgi?id=1385583 - http://www.debian.org/security/2016/dsa-3746 - http://hg.code.sf.net/p/graphicsm
la.redhat.com/show_bug.cgi?id=1385583 - http://www.debian.org/security/2016/dsa-3746 - http://hg.code.sf.net/p/graphicsmagick/code/rev/0a0dfa81906d - https://blogs.gentoo.org/ago/2016/09/15/graphicsmagick-stack-based-buffer-overflow-in-readsctimage-sct-c/
CVE ID: CVE-2016-8683 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file." Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/09/15/graphicsmagick-memory-allocation-failure-in-readpcximage-pcx-c/ - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.openwall.com/lists/oss-security/2016/10/16/7 - https:
s.opensuse.org/opensuse-updates/2016-10/msg00094.html - http://www.openwall.com/lists/oss-security/2016/10/16/7 - https://bugzilla.redhat.com/show_bug.cgi?id=1385583 - http://www.debian.org/security/2016/dsa-3746 - http://www.securityfocus.com/bid/93600 - http://hg.code.sf.net/p/graphicsmagick/code/rev/b9edafd479b9
CVE ID: CVE-2016-8684 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-10/msg00094.html - https://bugzilla.redhat.com/show_bug.cgi?id=1385583 - http://hg.code.sf.net/p/graphicsmagick/code/rev/c53725cb5449 - http://www.openwall.com/lists/oss-security/2016/10
5583 - http://hg.code.sf.net/p/graphicsmagick/code/rev/c53725cb5449 - http://www.openwall.com/lists/oss-security/2016/10/16/15 - http://www.debian.org/security/2016/dsa-3746 - http://www.securityfocus.com/bid/93779 - https://blogs.gentoo.org/ago/2016/09/15/graphicsmagick-memory-allocation-failure-in-magickmalloc-memory-c/
CVE ID: CVE-2016-8685 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93470 - http://www.openwall.com/lists/oss-security/2016/10/08/17 - http://www.openwall.com/lists/oss-security/2016/10/16/9 - https://blogs.gentoo.org/ago/2016/08/29/potrace-invalid-memory-access-in-findnext-decompose-c/
CVE ID: CVE-2016-8686 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T02:27:41.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93777 - http://www.openwall.com/lists/oss-security/2016/10/16/10 - https://blogs.gentoo.org/ago/2016/08/29/potrace-memory-allocation-failure/
CVE ID: CVE-2016-8687 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/16/11 - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - https://security.gentoo.org/glsa/201701-03 - http://www.securityfocus.com/bid/93781 - https://blogs.gentoo.org/ago/2016/09/11/libarc
rity.gentoo.org/glsa/201701-03 - http://www.securityfocus.com/bid/93781 - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-stack-based-buffer-overflow-in-bsdtar_expand_char-util-c/ - https://bugzilla.redhat.com/show_bug.cgi?id=1377926 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html - http://www.securitytracker.com/id/1037668 - https://github.com/libarchive/libarchive/commit/e37b620fe8f14535d737e89a4dcabaed4517bf1a
CVE ID: CVE-2016-8688 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause a denial of service (crash) via a crafted file, which triggers an invalid read in the (1) detect_form or (2) bid_entry function in libarchive/archive_read_support_format_mtree.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/16/11 - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - https://blogs.gento
ts/oss-security/2016/10/16/11 - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-use-after-free-in-detect_form-archive_read_support_format_mtree-c/ - https://bugzilla.redhat.com/show_bug.cgi?id=1377923 - https://security.gentoo.org/glsa/201701-03 - https://github.com/libarchive/libarchive/commit/eec077f52bfa2d3f7103b4b74d52572ba8a15aca - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-heap-based-buffer-overflow-in-bid_entry-archive_read_support_format_mtree-c/ - http://www.securityfocus.com/bid/93781 - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-memory-corruptionunknown-crash-in-bid_entry-ar
com/bid/93781 - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-memory-corruptionunknown-crash-in-bid_entry-archive_read_support_format_mtree-c/ - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-heap-based-buffer-overflow-in-detect_form-archive_read_support_format_mtree-c/ - http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-use-after-free-in-bid_entry-archive_read_support_format_mtree-c/
CVE ID: CVE-2016-8689 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out-of-bounds read) via multiple EmptyStream attributes in a header in a 7zip archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/16/11 - https://github.com/libarchive/libarchive/commit/7f17c791dcfd8c0416e2cd2485b19410e47ef126 - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - https://blogs.gentoo.org
16e2cd2485b19410e47ef126 - https://lists.debian.org/debian-lts-announce/2018/11/msg00037.html - https://blogs.gentoo.org/ago/2016/09/11/libarchive-bsdtar-heap-based-buffer-overflow-in-read_header-archive_read_support_format_7zip-c/ - https://security.gentoo.org/glsa/201701-03 - https://bugzilla.redhat.com/show_bug.cgi?id=1377925 - http://www.securityfocus.com/bid/93781 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00027.html
CVE ID: CVE-2016-8690 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22FCKKHQCQ3S6TZY5G44EFDTMWOJXJRD/ - https://github.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca - https://lists.debian.org/debian-lts-announce/2
thub.com/mdadams/jasper/commit/8f62b4761711d036fd8964df256b938c809b7fca - https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html - https://blogs.gentoo.org/ago/2016/10/16/jasper-two-null-pointer-dereference-in-bmp_getdata-bmp_dec-c/ - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securityfocus.com/bid/93590 - http://www.openwall.com/lists/oss-security/2016/08/23/6 - http://www.openwall.com/lists/oss-security/2016/10/16/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1385499
CVE ID: CVE-2016-8691 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:27:41.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1385502 - http://www.securityfocus.com/bid/93593 - http://www.debian.org/security/2017/dsa-3785 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lis
://www.debian.org/security/2017/dsa-3785 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/08/23/6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THLEZURI4D24PRM7SMASC5I25IAWXXTM/ - https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/ - https://github.com/mdadams/jasper/commit/d8c2604cd438c41ec72aff52c16ebd8183068020 - http://www.openwall.com/lists/oss-security/2016/10/16/14