Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-8105 2Debian Freetype 2Debian Linux Freetype May 13, 2026 Apr 24, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.
CVE-2017-8073 2Debian Weechat 2Debian Linux Weechat May 13, 2026 Apr 23, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.
CVE-2017-8064 2Debian Linux 2Debian Linux Linux Kernel May 13, 2026 Apr 23, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash...Show more drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.Show less
CVE-2016-2347 3Debian Lhasa ProjectOpensuse 4Debian Linux LeapLhasa+1 more May 13, 2026 Apr 21, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.
CVE-2017-7718 2Debian Qemu 2Debian Linux Qemu May 13, 2026 Apr 20, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cir...Show more hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.Show less
CVE-2017-7943 2Debian Imagemagick 2Debian Linux Imagemagick May 13, 2026 Apr 18, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
CVE-2017-7941 2Debian Imagemagick 2Debian Linux Imagemagick May 13, 2026 Apr 18, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.
CVE-2017-7645 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux May 13, 2026 Apr 18, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, a...Show more The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c.Show less
CVE-2016-7551 2Debian Digium 3Asterisk Certified AsteriskDebian Linux May 13, 2026 Apr 17, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a denial of service (port exhaustion).
CVE-2017-7889 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux May 13, 2026 Apr 17, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and by...Show more The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c.Show less
CVE-2017-7868 2Debian Icu Project 2Debian Linux International Components For Unicode May 13, 2026 Apr 14, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex3...Show more International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function.Show less
CVE-2017-7867 2Debian Icu Project 2Debian Linux International Components For Unicode May 13, 2026 Apr 14, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeI...Show more International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function.Show less
CVE-2017-7865 2Debian Ffmpeg 2Debian Linux Ffmpeg May 13, 2026 Apr 14, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function...Show more FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c.Show less
CVE-2017-7863 2Debian Ffmpeg 2Debian Linux Ffmpeg May 13, 2026 Apr 14, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c.
CVE-2015-8619 2Debian Qemu 2Debian Linux Qemu May 13, 2026 Apr 13, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).
CVE-2015-8567 6Canonical DebianFedoraproject+3 more 10Debian Linux FedoraLeap+7 more May 13, 2026 Apr 13, 2017 N/A· v4 7.7 HIGH· v3 6.8 MEDIUM· v2 Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
CVE-2015-8345 2Debian Qemu 2Debian Linux Qemu May 13, 2026 Apr 13, 2017 N/A· v4 6.5 MEDIUM· v3 2.1 LOW· v2 The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.
CVE-2015-6674 2Debian Inspircd 2Debian Linux Inspircd May 13, 2026 Apr 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplete fix of CVE-2012-183...Show more Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplete fix of CVE-2012-1836.Show less
CVE-2012-6697 2Debian Inspire Ircd 2Debian Linux Inspircd May 13, 2026 Apr 13, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 InspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).
CVE-2017-7747 2Debian Wireshark 2Debian Linux Wireshark May 13, 2026 Apr 12, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting addit...Show more In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.Show less

Previous 1...404405406...508 Next