|
268191
|
7.8 |
HIGH
Local
|
fedoraproject
debian
canonical
freedesktop
|
fedora
debian_linux
ubuntu_linux
poppler
|
Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or poss…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8868
|
2024-11-21 11:39 |
2016-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268192
|
9.8 |
CRITICAL
Network
|
opensuse
jq_project
|
leap
opensuse
jq
|
Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a heap-based buffer overflow.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-8863
|
2024-11-21 11:39 |
2016-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268193
|
5.1 |
MEDIUM
Local
|
linux
canonical
|
linux_kernel
ubuntu_linux
|
Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated …
|
CWE-362
Race Condition
|
CVE-2015-8839
|
2024-11-21 11:39 |
2016-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268194
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO …
|
NVD-CWE-Other
|
CVE-2015-8830
|
2024-11-21 11:39 |
2016-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268195
|
7.5 |
HIGH
Network
|
linux
|
linux_kernel
|
fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration recovery operations, which allows remote NFS servers to cause a denial of servic…
|
NVD-CWE-Other
|
CVE-2015-8746
|
2024-11-21 11:39 |
2016-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268196
|
5.5 |
MEDIUM
Local
|
linux
suse
novell
|
linux_kernel
suse_linux_enterprise_module_for_public_cloud
suse_linux_enterprise_live_patching
suse_linux_enterprise_server
suse_linux_enterprise_software_development_kit
suse_linux_en…
|
The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim c…
|
CWE-284
Improper Access Control
|
CVE-2015-8845
|
2024-11-21 11:39 |
2016-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268197
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the S and T bits set, which allows local users to cause a denial of service (TM Bad…
|
CWE-20
Improper Input Validation
|
CVE-2015-8844
|
2024-11-21 11:39 |
2016-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268198
|
9.8 |
CRITICAL
Network
|
novell
linux
canonical
|
suse_linux_enterprise_real_time_extension
linux_kernel
ubuntu_linux
|
drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service …
|
NVD-CWE-Other
|
CVE-2015-8812
|
2024-11-21 11:39 |
2016-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268199
|
6.8 |
MEDIUM
Physics
|
novell
linux
suse
|
suse_linux_enterprise_server
suse_linux_enterprise_debuginfo
suse_linux_enterprise_live_patching
suse_linux_enterprise_real_time_extension
suse_linux_enterprise_desktop
suse_linux_ente…
|
The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a …
|
NVD-CWE-Other
|
CVE-2015-8816
|
2024-11-21 11:39 |
2016-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268200
|
7.5 |
HIGH
Network
|
varnish_cache_project
debian
|
varnish_cache
debian_linux
|
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated…
|
NVD-CWE-Other
|
CVE-2015-8852
|
2024-11-21 11:39 |
2016-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
