CVE Vulnerability Catalog

The DNP3 protocol analyzer in Bro before version 2.3.2 has an issue with handling zero values of packet length, which can lead to denial of service.

IBM Tivoli IT Asset Management, Tivoli Service Request Manager, and Maximo Asset Management have a vulnerability that allows remote authenticated users to execute arbitrary code. This affects versions 7.1 through 7.1.1.8 and 7.2, as well as Maximo versions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002.

In the Linux kernel before version 2.6.24, the videobuf_mapping data structures are not initialized in drivers/media/video/videobuf-vmalloc.c. This allows local users to trigger an incorrect count value and videobuf leak via unspecified vectors.

The TP-Link TL-SG108E 1.0 has a hard-coded ciphering key, which may lead to unauthorized access to data. This issue affects the firmware version 1.1.2 Build 20141017 Rel.50749.

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, leading to a buffer overflow.

The cp2112_gpio_direction_input function in the Linux kernel 4.9.x before 4.9.9 does not return the expected EIO error status for a zero-length report, which may lead to an unspecified impact on local users.

In the Linux kernel 4.9.x before version 4.9.11, there is a bug in drivers/net/usb/catc.c that incorrectly interacts with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service or memory corruption.

In the Linux kernel 4.9.x before version 4.9.11, there is a bug in drivers/net/usb/rtl8150.c that incorrectly interacts with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service or memory corruption.

In the Linux kernel 4.9.x before 4.9.11, there is a bug in drivers/net/usb/pegasus.c that incorrectly interacts with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service or memory corruption.

In the Linux kernel versions 4.9.x and 4.10.x before 4.10.12, there is an incorrect interaction with the CONFIG_VMAP_STACK option in drivers/char/virtio_console.c. This can lead to system crashes or memory corruption by local users.

In the Linux kernel versions 4.9.x and 4.10.x before 4.10.2, there is a bug in the gs_usb.c file that incorrectly interacts with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service by leveraging the use of more than one virtual page for a DMA scatterlist.

The Linux kernel versions 4.9.x and 4.10.x through 4.10.12 have an incorrect interaction with the CONFIG_VMAP_STACK option, which may lead to system crashes or memory corruption. Local users can exploit this vulnerability by using more than one virtual page for a DMA scatterlist.

In the Linux kernel versions 4.9.x and 4.10.x before 4.10.12, there is a bug in dvb_usb_core.c that incorrectly interacts with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service or memory corruption.

In the Linux kernel versions 4.9.x and 4.10.x before 4.10.12, there is a bug in the cxusb.c file that incorrectly interacts with the CONFIG_VMAP_STACK option. This allows local users to cause a denial of service (system crash) or potentially have unspecified other impacts by leveraging the use of more than one virtual page for a DMA scatterlist.

In the Linux kernel versions 4.9.x and 4.10.x before 4.10.4, there is a bug in dw2102.c that interacts incorrectly with the CONFIG_VMAP_STACK option. This can lead to system crashes or memory corruption by local users.

In the Linux kernel versions 4.9.x and 4.10.x before 4.10.7, there is a bug in the dvb-usb-firmware.c file that incorrectly interacts with the CONFIG_VMAP_STACK option. This can lead to system crashes or memory corruption by local users.

The backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6 for Scheme allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression with a repeating pattern.

The bzread function in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.

Skia, as used in Google Chrome before version 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.

The Broadcom Wi-Fi driver for Android, used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context of the kernel.