Total
210374 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2016-5042 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 5.0 MEDIUM | 7.5 HIGH |
The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section. | |||||
CVE-2016-5041 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 5.0 MEDIUM | 7.5 HIGH |
dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name. | |||||
CVE-2016-5040 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 5.0 MEDIUM | 7.5 HIGH |
libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header. | |||||
CVE-2016-5039 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 5.0 MEDIUM | 7.5 HIGH |
The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on. | |||||
CVE-2016-5038 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 5.0 MEDIUM | 7.5 HIGH |
The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str. | |||||
CVE-2016-5037 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |||||
CVE-2016-5036 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 5.0 MEDIUM | 7.5 HIGH |
The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data. | |||||
CVE-2016-5035 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. | |||||
CVE-2016-5034 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records. | |||||
CVE-2016-5033 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. | |||||
CVE-2016-5032 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file. | |||||
CVE-2016-5031 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 5.5 MEDIUM |
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. | |||||
CVE-2016-5028 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections. | |||||
CVE-2015-8750 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file. | |||||
CVE-2016-2050 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file. | |||||
CVE-2015-8880 | 1 Php | 1 Php | 2022-03-01 | 10.0 HIGH | 9.8 CRITICAL |
Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error. | |||||
CVE-2016-5029 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file. | |||||
CVE-2016-5030 | 1 Libdwarf Project | 1 Libdwarf | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | |||||
CVE-2021-3541 | 4 Netapp, Oracle, Redhat and 1 more | 27 Active Iq Unified Manager, Cloud Backup, Clustered Data Ontap and 24 more | 2022-03-01 | 4.0 MEDIUM | 6.5 MEDIUM |
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service. | |||||
CVE-2021-26272 | 2 Ckeditor, Oracle | 10 Ckeditor, Agile Plm, Application Express and 7 more | 2022-03-01 | 4.3 MEDIUM | 6.5 MEDIUM |
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin). |