Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Debian_linux
(Debian)| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2017-03-04 | CVE-2017-6473 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets. | Debian_linux, Wireshark | 7.5 | ||
| 2017-03-04 | CVE-2017-6474 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes. | Debian_linux, Wireshark | 7.5 | ||
| 2017-03-10 | CVE-2017-6312 | Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations. | Debian_linux, Fedora, Gdk\-Pixbuf | 5.5 | ||
| 2017-03-10 | CVE-2017-6313 | Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file. | Debian_linux, Fedora, Gdk\-Pixbuf | 7.1 | ||
| 2017-03-10 | CVE-2017-6314 | The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file. | Debian_linux, Fedora, Gdk\-Pixbuf | 5.5 | ||
| 2017-03-10 | CVE-2017-6800 | An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during handling of LONG data types, related to MAPIPrint() in libytnef. | Debian_linux, Ytnef | 7.5 | ||
| 2017-03-10 | CVE-2017-6801 | An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFParse() in libytnef. | Debian_linux, Ytnef | 7.5 | ||
| 2017-03-10 | CVE-2017-6802 | An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF() in libytnef. | Debian_linux, Ytnef | 7.5 | ||
| 2017-03-15 | CVE-2016-10155 | Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. | Debian_linux, Qemu | 6.0 | ||
| 2017-03-16 | CVE-2017-5617 | The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file. | Debian_linux, Svg_salamander | 7.4 |