CVE Vulnerability Catalog

A heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before version 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.

The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service via a crafted JSON file, leading to stack consumption and application crash. This issue has been fixed in jq 1.6_rc1-r0.

The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshake, known as a read-timeout vulnerability.

CVE-2015-8868 involves a heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before version 0.40.0. This allows remote attackers to cause a denial of service or potentially execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.

The adreno_perfcounter_query_group function in the Adreno GPU driver for Linux kernel 3.x uses an incorrect integer data type, which may lead to denial of service through integer overflow, heap-based buffer overflow, and incorrect memory allocation.

The msm_ipc_router_bind_control_port function in the IPC router kernel module for Linux kernel 3.x does not verify that a port is a client port. This allows attackers to gain privileges or cause a denial of service by making many BIND_CONTROL_PORT ioctl calls.

CVE-2016-1392 is an open redirect vulnerability in Cisco Prime Collaboration Assurance Software versions 10.5 through 11.0 that allows remote attackers to redirect users to arbitrary websites.

The gadgets-integration API in Cisco Finesse versions 8.5(1) through 11.0(1) is vulnerable to server-side request forgery (SSRF) attacks via a crafted request. An attacker can exploit this vulnerability to conduct unauthorized requests to the server.

The FirePOWER Security Services Processor (SSP) module in Cisco ASA 5585-X devices with FirePOWER Services versions 5.3.1 through 6.0.0 misconfigures kernel logging, allowing remote attackers to cause a denial of service by flooding IP traffic.

Cisco FirePOWER System Software versions 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, as well as on the Advanced Malware Protection (AMP) for Networks component, allows remote attackers to cause a denial of service via crafted packets.

Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted packed executable.

The X509_NAME_oneline function in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.

The asn1_d2i_read_bio function in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.

Integer overflow in the EVP_EncryptUpdate function in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

Integer overflow in the EVP_EncodeUpdate function in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h can lead to denial of service due to heap memory corruption when processing a large amount of binary data.

OpenSSL before version 0.9.6 has a flaw in handling C bitwise-shift operations that can lead to improper RSA key generation on 64-bit HP-UX platforms. This makes it easier for remote attackers to defeat cryptographic protection mechanisms.

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, allowing local users to gain privileges by leveraging a group-writable setgid directory.

The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, allowing local users to gain privileges by mounting an aufs filesystem on top of a FUSE filesystem and then executing a crafted setuid program.

The atl2_probe function in Atheros network drivers in the Linux kernel up to version 4.5.2 incorrectly enables scatter/gather I/O, allowing remote attackers to obtain sensitive information from kernel memory by reading packet data.