Skip to content
OpenAdvisories

Archive

9 April 2017

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —

    LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (applicati…

  • Unscored —

    The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a den…

  • Unscored —

    The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might all…

  • Unscored —

    tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attacker…

  • Unscored —

    tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and appl…

  • Unscored —

    coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined …

  • Unscored —

    tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issu…

  • Unscored —

    elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member …

  • Unscored —

    au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers …

  • Unscored —

    aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to ca…

  • Unscored —

    The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-…

  • Unscored —

    The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-…

  • Unscored —

    elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote at…

  • Unscored —

    LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which …

  • Unscored —

    The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a den…

  • Unscored —

    The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (he…

  • Unscored —

    LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote …

  • Unscored —

    LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might al…

  • Unscored —

    elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause …

  • Unscored —

    au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remot…

  • Unscored —

    The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divi…

  • Unscored —

    The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-base…

  • Unscored —

    LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might al…

  • Unscored —

    OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as …

  • Unscored —

    OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as d…

  • Unscored —

    In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymou…