|
246911
|
6.5 |
MEDIUM
Network
|
libtiff debian canonical
|
libtiff debian_linux ubuntu_linux
|
In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-9404
|
2024-11-21 12:36 |
2017-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246912
|
6.5 |
MEDIUM
Network
|
libtiff debian canonical
|
libtiff debian_linux ubuntu_linux
|
In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-9403
|
2024-11-21 12:36 |
2017-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246913
|
9.8 |
CRITICAL
Network
|
gnu opensuse fedoraproject
|
adns leap fedora
|
An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-9104
|
2024-11-21 12:35 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246914
|
7.5 |
HIGH
Network
|
gnu opensuse fedoraproject
|
adns leap fedora
|
An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r, since used is incremented according to r…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9108
|
2024-11-21 12:35 |
2020-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246915
|
8.8 |
HIGH
Network
|
gnu fedoraproject
|
adns fedora
|
An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug may well be exploitable as a remote code…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-9105
|
2024-11-21 12:35 |
2020-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246916
|
9.8 |
CRITICAL
Network
|
gnu opensuse fedoraproject
|
adns leap fedora
|
An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value can be used as the first label length. De…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9103
|
2024-11-21 12:35 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246917
|
9.8 |
CRITICAL
Network
|
gnu opensuse fedoraproject
|
adns leap fedora
|
An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the second answer scan finds the same RRs at t…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9109
|
2024-11-21 12:35 |
2020-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246918
|
7.5 |
HIGH
Network
|
gnu fedoraproject
|
adns fedora
|
An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \, and adns_qf_quoteok_query was specified, qdparselabel wou…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9107
|
2024-11-21 12:35 |
2020-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246919
|
7.5 |
HIGH
Network
|
gnu fedoraproject
|
adns fedora
|
An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9106
|
2024-11-21 12:35 |
2020-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246920
|
6.5 |
MEDIUM
Network
|
cloudera
|
cloudera_manager
|
Secret data of processes managed by CM is not secured by file permissions.
|
CWE-275
Permission Issues
|
CVE-2017-9327
|
2024-11-21 12:35 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|