CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer (page 72)
Page 72 of 100 — CVEs classified under CWE-119, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-6115 | High | 7.2 | 2017-02-01 | IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the… |
CVE-2016-6042 | High | 7.3 | 2017-02-01 | IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By pers… |
CVE-2016-5985 | High | 7.8 | 2017-02-01 | The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker coul… |
CVE-2017-3790 | High | 8.6 | 2017-02-01 | A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauth… |
CVE-2016-10164 | Critical | 9.8 | 2017-02-01 | Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a deni… |
CVE-2017-3823 | High | 8.8 | 2017-02-01 | An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the… |
CVE-2016-8703 | High | 7.8 | 2017-01-31 | Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a craft… |
CVE-2016-8702 | High | 7.8 | 2017-01-31 | Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a craft… |
CVE-2016-8701 | High | 7.8 | 2017-01-31 | Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a craft… |
CVE-2016-8700 | High | 7.8 | 2017-01-31 | Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a craft… |
CVE-2016-8699 | High | 7.8 | 2017-01-31 | Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a craft… |
CVE-2016-8698 | High | 7.8 | 2017-01-31 | Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to have unspecified impact via a craft… |
CVE-2016-8686 | High | 7.8 | 2017-01-31 | The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation fail… |
CVE-2016-8685 | Medium | 5.5 | 2017-01-31 | The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP i… |
CVE-2015-2181 | High | 8.8 | 2017-01-30 | Multiple buffer overflows in the DBMail driver in the Password plugin in Roundcube before 1.1.0 allow remote attackers to have unspecified impact via the (1) p… |
CVE-2016-2519 | Medium | 5.9 | 2017-01-30 | ntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (ntpd abort) by a large request data value, which trigg… |
CVE-2015-7975 | Medium | 6.2 | 2017-01-30 | The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a deni… |
CVE-2017-5486 | Critical | 9.8 | 2017-01-28 | The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). |
CVE-2017-5485 | Critical | 9.8 | 2017-01-28 | The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap(). |
CVE-2017-5484 | Critical | 9.8 | 2017-01-28 | The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print(). |
CVE-2017-5483 | Critical | 9.8 | 2017-01-28 | The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse(). |
CVE-2017-5482 | Critical | 9.8 | 2017-01-28 | The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575. |
CVE-2017-5342 | Critical | 9.8 | 2017-01-28 | In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_p… |
CVE-2017-5341 | Critical | 9.8 | 2017-01-28 | The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). |
CVE-2017-5205 | Critical | 9.8 | 2017-01-28 | The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). |
CVE-2017-5204 | Critical | 9.8 | 2017-01-28 | The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print(). |
CVE-2017-5203 | Critical | 9.8 | 2017-01-28 | The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). |
CVE-2017-5202 | Critical | 9.8 | 2017-01-28 | The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). |
CVE-2016-8575 | Critical | 9.8 | 2017-01-28 | The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482. |
CVE-2016-8574 | Critical | 9.8 | 2017-01-28 | The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print(). |
CVE-2016-7993 | Critical | 9.8 | 2017-01-28 | A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight res… |
CVE-2016-7992 | Critical | 9.8 | 2017-01-28 | The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print(). |
CVE-2016-7986 | Critical | 9.8 | 2017-01-28 | The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions. |
CVE-2016-7985 | Critical | 9.8 | 2017-01-28 | The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print(). |
CVE-2016-7984 | Critical | 9.8 | 2017-01-28 | The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print(). |
CVE-2016-7983 | Critical | 9.8 | 2017-01-28 | The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). |
CVE-2016-7975 | Critical | 9.8 | 2017-01-28 | The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print(). |
CVE-2016-7974 | Critical | 9.8 | 2017-01-28 | The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions. |
CVE-2016-7973 | Critical | 9.8 | 2017-01-28 | The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions. |
CVE-2016-7940 | Critical | 9.8 | 2017-01-28 | The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions. |
CVE-2016-7939 | Critical | 9.8 | 2017-01-28 | The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions. |
CVE-2016-7937 | Critical | 9.8 | 2017-01-28 | The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print(). |
CVE-2016-7936 | Critical | 9.8 | 2017-01-28 | The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print(). |
CVE-2016-7935 | Critical | 9.8 | 2017-01-28 | The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print(). |
CVE-2016-7934 | Critical | 9.8 | 2017-01-28 | The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print(). |
CVE-2016-7933 | Critical | 9.8 | 2017-01-28 | The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print(). |
CVE-2016-7932 | Critical | 9.8 | 2017-01-28 | The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum(). |
CVE-2016-7931 | Critical | 9.8 | 2017-01-28 | The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print(). |
CVE-2016-7930 | Critical | 9.8 | 2017-01-28 | The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print(). |
CVE-2016-7929 | Critical | 9.8 | 2017-01-28 | The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header(). |
CVE-2016-7928 | Critical | 9.8 | 2017-01-28 | The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print(). |
CVE-2016-7927 | Critical | 9.8 | 2017-01-28 | The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print(). |
CVE-2016-7926 | Critical | 9.8 | 2017-01-28 | The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype_print(). |
CVE-2016-7925 | Critical | 9.8 | 2017-01-28 | The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl_if_print(). |
CVE-2016-7924 | Critical | 9.8 | 2017-01-28 | The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print(). |
CVE-2016-7923 | Critical | 9.8 | 2017-01-28 | The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print(). |
CVE-2016-7922 | Critical | 9.8 | 2017-01-28 | The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print(). |
CVE-2016-9636 | Critical | 9.8 | 2017-01-27 | Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers t… |
CVE-2016-9635 | Critical | 9.8 | 2017-01-27 | Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers t… |
CVE-2016-9634 | Critical | 9.8 | 2017-01-27 | Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers t… |
CVE-2016-9298 | Medium | 5.5 | 2017-01-27 | Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a de… |
CVE-2016-8411 | Critical | 9.8 | 2017-01-27 | Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: Q… |
CVE-2016-9307 | Critical | 9.8 | 2017-01-25 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3DS format f… |
CVE-2016-9306 | Critical | 9.8 | 2017-01-25 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DAE format f… |
CVE-2016-9304 | High | 8.8 | 2017-01-25 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DFX format f… |
CVE-2016-9303 | Critical | 9.8 | 2017-01-25 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop condition when reading… |
CVE-2017-5495 | High | 7.5 | 2017-01-24 | All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga… |
CVE-2017-2972 | High | 7.8 | 2017-01-24 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in th… |
CVE-2017-2971 | High | 7.8 | 2017-01-24 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the JP… |
CVE-2017-2970 | High | 7.8 | 2017-01-24 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the XS… |
CVE-2016-7567 | Critical | 9.8 | 2017-01-23 | Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via a crafted strin… |
CVE-2016-6920 | High | 7.5 | 2017-01-23 | Heap-based buffer overflow in the decode_block function in libavcodec/exr.c in FFmpeg before 3.1.3 allows remote attackers to cause a denial of service (applic… |
CVE-2016-5873 | Critical | 9.8 | 2017-01-23 | Buffer overflow in the HTTP URL parsing functions in pecl_http before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters… |
CVE-2016-3147 | Critical | 9.8 | 2017-01-23 | Buffer overflow in the collector.exe listener of the Landesk Management Suite 10.0.0.271 and earlier allows remote attackers to cause a denial of service and p… |
CVE-2015-8972 | Critical | 9.8 | 2017-01-23 | Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers t… |
CVE-2016-5321 | Medium | 6.5 | 2017-01-20 | The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image. |
CVE-2016-5319 | Medium | 6.5 | 2017-01-20 | Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file. |
CVE-2016-5318 | Medium | 6.5 | 2017-01-20 | Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff. |
CVE-2016-5317 | Medium | 6.5 | 2017-01-20 | Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows att… |
CVE-2016-5200 | High | 8.8 | 2017-01-19 | V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied… |
CVE-2016-5199 | High | 8.8 | 2017-01-19 | An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.28… |
CVE-2016-9679 | Critical | 9.8 | 2017-01-18 | Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer. |
CVE-2016-9676 | Critical | 9.8 | 2017-01-18 | Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors. |
CVE-2016-9844 | Medium | 4.0 | 2017-01-18 | Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compressio… |
CVE-2016-7996 | Critical | 9.8 | 2017-01-18 | Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with… |
CVE-2016-7564 | High | 7.5 | 2017-01-18 | Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash) via craft… |
CVE-2016-2233 | High | 7.5 | 2017-01-18 | Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash)… |
CVE-2014-9913 | Medium | 4.0 | 2017-01-18 | Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to… |
CVE-2016-2090 | Critical | 9.8 | 2017-01-13 | Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-b… |
CVE-2017-5364 | High | 7.8 | 2017-01-13 | Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim opens the spe… |
CVE-2016-8459 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. V… |
CVE-2016-8441 | High | 7.8 | 2017-01-12 | Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Andr… |
CVE-2016-8440 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android… |
CVE-2016-8439 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3… |
CVE-2017-5225 | High | 8.8 | 2017-01-12 | LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value. |
CVE-2016-7480 | Critical | 9.8 | 2017-01-11 | The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote att… |
CVE-2017-2967 | High | 7.8 | 2017-01-11 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in th… |
CVE-2017-2966 | High | 7.8 | 2017-01-11 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the im… |
CVE-2017-2965 | High | 7.8 | 2017-01-11 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in th… |
CVE-2017-2964 | High | 7.8 | 2017-01-11 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in th… |