CVSS: 7.8EPSS: 6%CPEs: 52EXPL: 7CVE-2017-1000366 – Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic Stack Clash' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2017-1000366
19 Jun 2017 — glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier. Glibc contiene una vulnerabilidad que permite que los valores LD_LIBRARY_PATH esp... • https://packetstorm.news/files/id/154361 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 1CVE-2016-9960 – Gentoo Linux Security Advisory 201707-02
https://notcve.org/view.php?id=CVE-2016-9960
06 Jun 2017 — game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash). game-music-emu anterior a versión 0.6.1 permite a los usuarios locales causar una denegación de servicio (dividir por cero y bloqueo del proceso). Multiple vulnerabilities have been found in Game Music Emu, the worst of which could lead to the execution of arbitrary code. Versions are affected. • http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html • CWE-369: Divide By Zero •
CVSS: 10.0EPSS: 2%CPEs: 12EXPL: 1CVE-2016-9961 – Gentoo Linux Security Advisory 201707-02
https://notcve.org/view.php?id=CVE-2016-9961
06 Jun 2017 — game-music-emu before 0.6.1 mishandles unspecified integer values. game-music-emu anterior a versión 0.6.1 maneja inapropiadamente los valores de enteros no especificados. Multiple vulnerabilities have been found in Game Music Emu, the worst of which could lead to the execution of arbitrary code. Versions are affected. • http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html • CWE-189: Numeric Errors •
CVSS: 7.5EPSS: 1%CPEs: 14EXPL: 0CVE-2014-9842
https://notcve.org/view.php?id=CVE-2014-9842
20 Mar 2017 — Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Fuga de memoria en la función ReadPSDLayers en coders/psd.c en ImageMagick 6.8.9.9 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de vectores no especificados. • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html • CWE-400: Uncontrolled Resource Consumption •
CVSS: 9.8EPSS: 2%CPEs: 16EXPL: 0CVE-2014-9846
https://notcve.org/view.php?id=CVE-2014-9846
20 Mar 2017 — Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. Desbordamiento de búfer en la función ReadRLEImage en coders/rle.c en ImageMagick 6.8.9.9 permite a atacantes remotos tener impacto no especificado. • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 3%CPEs: 15EXPL: 0CVE-2014-9847
https://notcve.org/view.php?id=CVE-2014-9847
20 Mar 2017 — The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. El decodificador jng en ImageMagick 6.8.9.9 permite a atacantes remotos tener un impacto no especificado. • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 2%CPEs: 17EXPL: 0CVE-2014-9848
https://notcve.org/view.php?id=CVE-2014-9848
20 Mar 2017 — Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption). Fuga de memoria en ImageMagick permite a atacantes remotos provocar una denegación de servicio (consumo de memoria). • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 1%CPEs: 14EXPL: 0CVE-2014-9849
https://notcve.org/view.php?id=CVE-2014-9849
20 Mar 2017 — The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). El codificador png en ImageMagick permite a atacantes remotos provocar una denegación de servicio (caída). • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 1%CPEs: 11EXPL: 0CVE-2014-9850
https://notcve.org/view.php?id=CVE-2014-9850
20 Mar 2017 — Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). Error lógico en ImageMagick 6.8.9.9 permite a atacantes remotos provocar una denegación de servicio (consumo de recursos). • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 2%CPEs: 14EXPL: 0CVE-2014-9851
https://notcve.org/view.php?id=CVE-2014-9851
20 Mar 2017 — ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). ImageMagick 6.8.9.9 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación). • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html • CWE-20: Improper Input Validation •