Debian

Debian Linux

9142 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2017-6472

  • EPSS 0.7%
  • Published 04.03.2017 03:59:00
  • Last modified 20.04.2025 01:37:25

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtmpt.c by properly incrementing a certain sequence va...

7.5

CVE-2017-6473

  • EPSS 0.7%
  • Published 04.03.2017 03:59:00
  • Last modified 20.04.2025 01:37:25

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.

7.5

CVE-2017-6474

  • EPSS 0.7%
  • Published 04.03.2017 03:59:00
  • Last modified 20.04.2025 01:37:25

In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.

7.5

CVE-2017-5193

  • EPSS 1.88%
  • Published 03.03.2017 15:59:00
  • Last modified 20.04.2025 01:37:25

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.

7.5

CVE-2017-5194

  • EPSS 1.87%
  • Published 03.03.2017 15:59:00
  • Last modified 20.04.2025 01:37:25

Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message.

7.5

CVE-2017-5356

Exploit
  • EPSS 2.76%
  • Published 03.03.2017 15:59:00
  • Last modified 20.04.2025 01:37:25

Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (]).

5.5

CVE-2016-9830

  • EPSS 0.6%
  • Published 01.03.2017 20:59:00
  • Last modified 20.04.2025 01:37:25

The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image.

5.5

CVE-2017-5974

Exploit
  • EPSS 0.6%
  • Published 01.03.2017 15:59:01
  • Last modified 10.07.2025 15:44:54

Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.

5.5

CVE-2017-5975

Exploit
  • EPSS 0.63%
  • Published 01.03.2017 15:59:01
  • Last modified 10.07.2025 15:44:54

Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.

5.5

CVE-2017-5976

Exploit
  • EPSS 0.63%
  • Published 01.03.2017 15:59:01
  • Last modified 10.07.2025 15:44:54

Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.