Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CVEs (10,508)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-0112 244d AppleAvaya+21 more 65Aaa Server Access RegistrarApache Based Web Server+62 more Apr 16, 2026 Nov 23, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a de...Show more The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.Show less
CVE-2004-0421 4Libpng OpenpkgRedhat+1 more 6Enterprise Linux Enterprise Linux DesktopLibpng+3 more Apr 16, 2026 Aug 18, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creatin...Show more The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.Show less
CVE-2004-0221 1Openbsd 1Openbsd Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as...Show more isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.Show less
CVE-2004-0184 1Tcpdump 1Tcpdump Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than...Show more Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.Show less
CVE-2004-0183 1Tcpdump 1Tcpdump Apr 16, 2026 May 4, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by t...Show more TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.Show less
CVE-1999-0006 1Qualcomm 1Qpopper Apr 16, 2026 Jul 14, 1998 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.
CVE-1999-0029 1Sgi 1Irix Apr 16, 2026 Jul 16, 1997 N/A· v4 8.4 HIGH· v3 7.2 HIGH· v2 root privileges via buffer overflow in ordist command on SGI IRIX systems.
CVE-1999-0022 6Bsdi FreebsdHp+3 more 7Aix Bsd OsFreebsd+4 more Apr 16, 2026 Jul 3, 1996 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Local user gains root privileges via buffer overflow in rdist, via expstr() function.

Previous 1...522 523 524 525526