Show filters
217 Total Results
Displaying 111-120 of 217
Sort by:
Attacker Value
Unknown
CVE-2017-6010
Disclosure Date: February 16, 2017 (last updated November 26, 2024)
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash.
0
Attacker Value
Unknown
CVE-2016-9560
Disclosure Date: February 15, 2017 (last updated November 26, 2024)
Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
0
Attacker Value
Unknown
CVE-2016-10165
Disclosure Date: February 03, 2017 (last updated December 21, 2023)
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
0
Attacker Value
Unknown
CVE-2016-2518
Disclosure Date: January 30, 2017 (last updated November 25, 2024)
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.
0
Attacker Value
Unknown
CVE-2016-7545
Disclosure Date: January 19, 2017 (last updated November 08, 2023)
SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
0
Attacker Value
Unknown
CVE-2016-7426
Disclosure Date: January 13, 2017 (last updated November 25, 2024)
NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address.
0
Attacker Value
Unknown
CVE-2016-9131
Disclosure Date: January 12, 2017 (last updated November 25, 2024)
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
0
Attacker Value
Unknown
CVE-2016-8864
Disclosure Date: November 02, 2016 (last updated November 25, 2024)
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
0
Attacker Value
Unknown
CVE-2016-5624
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
0
Attacker Value
Unknown
CVE-2016-5626
Disclosure Date: October 25, 2016 (last updated November 25, 2024)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.
0
