CWE-125 · Out-of-bounds Read (page 87)
Page 87 of 94 — CVEs classified under CWE-125, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-11002 | Medium | 5.5 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur. |
CVE-2017-14246 | High | 8.1 | 2017-09-21 | An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to misha… |
CVE-2017-14245 | High | 8.1 | 2017-09-21 | An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to misha… |
CVE-2017-14633 | Medium | 6.5 | 2017-09-21 | In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when oper… |
CVE-2017-14608 | Critical | 9.1 | 2017-09-20 | In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attac… |
CVE-2017-14607 | High | 8.1 | 2017-09-20 | In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this fla… |
CVE-2017-14529 | Medium | 5.5 | 2017-09-18 | The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName ve… |
CVE-2017-14503 | Medium | 6.5 | 2017-09-17 | libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha ar… |
CVE-2017-14502 | High | 7.5 | 2017-09-17 | read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bo… |
CVE-2017-14501 | Medium | 6.5 | 2017-09-17 | An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 i… |
CVE-2017-13725 | Critical | 9.8 | 2017-09-14 | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
CVE-2017-13690 | Critical | 9.8 | 2017-09-14 | The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
CVE-2017-13689 | Critical | 9.8 | 2017-09-14 | The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). |
CVE-2017-13688 | Critical | 9.8 | 2017-09-14 | The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print(). |
CVE-2017-13687 | Critical | 9.8 | 2017-09-14 | The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print(). |
CVE-2017-13055 | Critical | 9.8 | 2017-09-14 | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). |
CVE-2017-13054 | Critical | 9.8 | 2017-09-14 | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). |
CVE-2017-13053 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). |
CVE-2017-13052 | Critical | 9.8 | 2017-09-14 | The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). |
CVE-2017-13051 | Critical | 9.8 | 2017-09-14 | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
CVE-2017-13050 | Critical | 9.8 | 2017-09-14 | The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). |
CVE-2017-13049 | Critical | 9.8 | 2017-09-14 | The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). |
CVE-2017-13048 | Critical | 9.8 | 2017-09-14 | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
CVE-2017-13047 | Critical | 9.8 | 2017-09-14 | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
CVE-2017-13046 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
CVE-2017-13045 | Critical | 9.8 | 2017-09-14 | The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). |
CVE-2017-13044 | Critical | 9.8 | 2017-09-14 | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). |
CVE-2017-13043 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). |
CVE-2017-13042 | Critical | 9.8 | 2017-09-14 | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). |
CVE-2017-13041 | Critical | 9.8 | 2017-09-14 | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). |
CVE-2017-13040 | Critical | 9.8 | 2017-09-14 | The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. |
CVE-2017-13039 | Critical | 9.8 | 2017-09-14 | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
CVE-2017-13038 | Critical | 9.8 | 2017-09-14 | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). |
CVE-2017-13037 | Critical | 9.8 | 2017-09-14 | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). |
CVE-2017-13036 | Critical | 9.8 | 2017-09-14 | The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). |
CVE-2017-13035 | Critical | 9.8 | 2017-09-14 | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id(). |
CVE-2017-13034 | Critical | 9.8 | 2017-09-14 | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
CVE-2017-13033 | Critical | 9.8 | 2017-09-14 | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
CVE-2017-13032 | Critical | 9.8 | 2017-09-14 | The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string(). |
CVE-2017-13031 | Critical | 9.8 | 2017-09-14 | The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). |
CVE-2017-13030 | Critical | 9.8 | 2017-09-14 | The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. |
CVE-2017-13029 | Critical | 9.8 | 2017-09-14 | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options(). |
CVE-2017-13028 | Critical | 9.8 | 2017-09-14 | The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print(). |
CVE-2017-13027 | Critical | 9.8 | 2017-09-14 | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print(). |
CVE-2017-13026 | Critical | 9.8 | 2017-09-14 | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. |
CVE-2017-13025 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
CVE-2017-13024 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
CVE-2017-13023 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
CVE-2017-13022 | Critical | 9.8 | 2017-09-14 | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute(). |
CVE-2017-13021 | Critical | 9.8 | 2017-09-14 | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print(). |
CVE-2017-13020 | Critical | 9.8 | 2017-09-14 | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
CVE-2017-13019 | Critical | 9.8 | 2017-09-14 | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
CVE-2017-13018 | Critical | 9.8 | 2017-09-14 | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
CVE-2017-13017 | Critical | 9.8 | 2017-09-14 | The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print(). |
CVE-2017-13016 | Critical | 9.8 | 2017-09-14 | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
CVE-2017-13015 | Critical | 9.8 | 2017-09-14 | The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). |
CVE-2017-13014 | Critical | 9.8 | 2017-09-14 | The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions. |
CVE-2017-13013 | Critical | 9.8 | 2017-09-14 | The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. |
CVE-2017-13012 | Critical | 9.8 | 2017-09-14 | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
CVE-2017-13010 | Critical | 9.8 | 2017-09-14 | The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart(). |
CVE-2017-13009 | Critical | 9.8 | 2017-09-14 | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print(). |
CVE-2017-13008 | Critical | 9.8 | 2017-09-14 | The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). |
CVE-2017-13007 | Critical | 9.8 | 2017-09-14 | The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print(). |
CVE-2017-13006 | Critical | 9.8 | 2017-09-14 | The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. |
CVE-2017-13005 | Critical | 9.8 | 2017-09-14 | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter(). |
CVE-2017-13004 | Critical | 9.8 | 2017-09-14 | The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header(). |
CVE-2017-13003 | Critical | 9.8 | 2017-09-14 | The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). |
CVE-2017-13002 | Critical | 9.8 | 2017-09-14 | The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension(). |
CVE-2017-13001 | Critical | 9.8 | 2017-09-14 | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh(). |
CVE-2017-13000 | Critical | 9.8 | 2017-09-14 | The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(). |
CVE-2017-12999 | Critical | 9.8 | 2017-09-14 | The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print(). |
CVE-2017-12998 | Critical | 9.8 | 2017-09-14 | The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach(). |
CVE-2017-12997 | Critical | 9.8 | 2017-09-14 | The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print(). |
CVE-2017-12996 | Critical | 9.8 | 2017-09-14 | The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print(). |
CVE-2017-12995 | Critical | 9.8 | 2017-09-14 | The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). |
CVE-2017-12994 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
CVE-2017-12993 | Critical | 9.8 | 2017-09-14 | The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions. |
CVE-2017-12992 | Critical | 9.8 | 2017-09-14 | The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print(). |
CVE-2017-12991 | Critical | 9.8 | 2017-09-14 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
CVE-2017-12990 | Critical | 9.8 | 2017-09-14 | The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions. |
CVE-2017-12988 | Critical | 9.8 | 2017-09-14 | The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse(). |
CVE-2017-12987 | Critical | 9.8 | 2017-09-14 | The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). |
CVE-2017-12986 | Critical | 9.8 | 2017-09-14 | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
CVE-2017-12985 | Critical | 9.8 | 2017-09-14 | The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print(). |
CVE-2017-12902 | Critical | 9.8 | 2017-09-14 | The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions. |
CVE-2017-12901 | Critical | 9.8 | 2017-09-14 | The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print(). |
CVE-2017-12900 | Critical | 9.8 | 2017-09-14 | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf(). |
CVE-2017-12899 | Critical | 9.8 | 2017-09-14 | The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print(). |
CVE-2017-12898 | Critical | 9.8 | 2017-09-14 | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply(). |
CVE-2017-12897 | Critical | 9.8 | 2017-09-14 | The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print(). |
CVE-2017-12896 | Critical | 9.8 | 2017-09-14 | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print(). |
CVE-2017-12895 | Critical | 9.8 | 2017-09-14 | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
CVE-2017-12894 | Critical | 9.8 | 2017-09-14 | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring(). |
CVE-2017-12893 | Critical | 9.8 | 2017-09-14 | The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). |
CVE-2017-14410 | Medium | 5.5 | 2017-09-13 | A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, wh… |
CVE-2017-14408 | Medium | 5.5 | 2017-09-13 | A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application cras… |
CVE-2017-14407 | Medium | 5.5 | 2017-09-13 | A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2. The vulnerability causes an application crash, which l… |
CVE-2017-14316 | High | 8.8 | 2017-09-12 | A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should b… |
CVE-2017-14314 | Medium | 6.5 | 2017-09-12 | Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon he… |
CVE-2017-14248 | Medium | 6.5 | 2017-09-11 | A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a cra… |