{"id":268,"date":"2015-07-04T19:34:23","date_gmt":"2015-07-04T17:34:23","guid":{"rendered":"http:\/\/blogs.gentoo.org\/ago\/?page_id=268"},"modified":"2020-07-04T15:19:10","modified_gmt":"2020-07-04T13:19:10","slug":"advisories","status":"publish","type":"page","link":"https:\/\/blogs.gentoo.org\/ago\/advisories\/","title":{"rendered":"Advisories"},"content":{"rendered":"

Below, a table which summarizes:
\n– Vulnerabilities found by me;
\n– Bugs spotted by ASan\/fuzzers\/$other_tools that are not security relevant.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Summary<\/th>\nCVE<\/th>\n<\/tr>\n
libav: divide-by-zero in ff_h263_decode_mba(ituh263dec.c)<\/a><\/td>\nCVE-2015-5479<\/td>\n<\/tr>\n
portage-utils: heap-based buffer overflow in show_sync_history (qlop.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
portage-utils: stack-based buffer overflow in prepare_qfile_args (qfile.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
paps: heap-based buffer overflow in read_file (paps.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
postgresql: psql: heap-based buffer overflow in gets_fromFile (input.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
desktop-file-utils: desktop-file-validate: heap-based buffer overflow in validate.c<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
syslog-ng: NULL pointer dereference in report_syntax_error (cfg-parser.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
logrotate: heap-based buffer overflow in readConfigFile (config.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
WiRouterKeyRec: divide-by-zero in agpf_get_serial (agpf.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
libav: heap-based buffer overflow in ff_audio_resample (resample.c)<\/a>\n<\/td>\nCVE-2016-6832<\/td>\n<\/tr>\n
WiRouterKeyRec: signed shift in agpf_check_agpf (agpf.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
WiRouterKeyRec: signed integer overflow in agpf_get_serial (agpf.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
potrace: multiple(six) heap-based buffer overflow in bm_readbody_bmp (bitmap_io.c<\/a>\n<\/td>\nCVE-2016-8698
\nCVE-2016-8699
\nCVE-2016-8700
\nCVE-2016-8701
\nCVE-2016-8702
\nCVE-2016-8703<\/td>\n<\/tr>\n
potrace: divide-by-zero in bm_new (bitmap.h)<\/a>\n<\/td>\nCVE-2016-8697<\/td>\n<\/tr>\n
potrace: multiple (three) NULL pointer dereference in bm_readbody_bmp (bitmap_io.c)<\/a>\n<\/td>\nCVE-2016-8694
\nCVE-2016-8695
\nCVE-2016-8696<\/td>\n<\/tr>\n
libav: stack-based buffer overflow in aac_sync (aac_parser.c)<\/a>\n<\/td>\nCVE-2016-7393<\/td>\n<\/tr>\n
graphicsmagick: two heap-based buffer overflow in ReadTIFFImage (tiff.c)<\/a>\n<\/td>\nCVE-2016-7449<\/td>\n<\/tr>\n
potrace: invalid memory access in findnext (decompose.c)<\/a>\n<\/td>\nCVE-2016-8685<\/td>\n<\/tr>\n
potrace: memory allocation failure<\/a>\n<\/td>\nCVE-2016-8686<\/td>\n<\/tr>\n
ettercap: etterlog: multiple (three) heap-based buffer overflow (el_profiles.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
graphicsmagick: NULL pointer dereference in MagickStrlCpy (utility.c)<\/a>\n<\/td>\nCVE-2016-7449<\/td>\n<\/tr>\n
ettercap: etterlog: NULL pointer dereference in fingerprint_search (ec_fingerprint.c)<\/a>\n<\/td>\n<\/td>\n<\/tr>\n
autotrace: heap-based buffer overflow in pstoedit_suffix_table_init (output-pstoedit.c)<\/a>\n<\/td>\nCVE-2016-7392<\/td>\n<\/tr>\n
libarchive: bsdtar: heap-based buffer overflow in detect_form (archive_read_support_format_mtree.c)<\/a>\n<\/td>\nCVE-2016-8688<\/td>\n<\/tr>\n
libarchive: bsdtar: heap-based buffer overflow in read_Header (archive_read_support_format_7zip.c)<\/a>\n<\/td>\nCVE-2016-8689<\/td>\n<\/tr>\n
libarchive: bsdtar: memory corruption\/unknown-crash in bid_entry (archive_read_support_format_mtree.c)<\/a>\n<\/td>\nCVE-2016-8688<\/td>\n<\/tr>\n
libarchive: bsdtar: heap-based buffer overflow in bid_entry (archive_read_support_format_mtree.c)<\/a><\/p>\nCVE-2016-8688<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
libarchive: bsdtar use-after-free in bid_entry (archive_read_support_format_mtree.c)<\/a>\n<\/td>\nCVE-2016-8688<\/td>\n<\/tr>\n
libarchive: bsdtar use-after-free in detect_form (archive_read_support_format_mtree.c)<\/a>\n<\/td>\nCVE-2016-8688<\/td>\n<\/tr>\n
libarchive: bsdtar: stack-based buffer overflow in bsdtar_expand_char (util.c)<\/a>\n<\/td>\nCVE-2016-8687<\/td>\n<\/tr>\n
graphicsmagick: stack-based buffer overflow in ReadSCTImage (sct.c)<\/a>\n<\/td>\nCVE-2016-8682<\/td>\n<\/tr>\n
graphicsmagick: memory allocation failure in ReadPCXImage (pcx.c)<\/a>\n<\/td>\nCVE-2016-8683<\/td>\n<\/tr>\n
graphicsmagick: memory allocation failure in MagickMalloc (memory.c)<\/a>\n<\/td>\nCVE-2016-8684<\/td>\n<\/tr>\n
libav: NULL pointer dereference in put_no_rnd_pixels8_xy2_mmx (rnd_template.c)<\/a><\/td>\nCVE-2016-7424<\/td>\n<\/tr>\n
libav: invalid memory access in ff_put_pixels8_xy2_mmx (rnd_template.c)<\/a><\/td>\nCVE-2016-7477<\/td>\n<\/tr>\n
libav: divide-by-zero in sbr_make_f_master (aacsbr.c)<\/a><\/td>\nCVE-2016-7499<\/td>\n<\/tr>\n
mupdf: mutool: infinite loop in gatherresourceinfo (pdfinfo.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
mupdf: use-after-free in pdf_to_num (pdf-object.c)<\/a><\/td>\nCVE-2016-8674<\/td>\n<\/tr>\n
mupdf: mujstest: global-buffer-overflow in my_getline (jstest_main.c)<\/a><\/td>\nCVE-2016-10247<\/td>\n<\/tr>\n
mupdf: mujstest: global-buffer-overflow in main (jstest_main.c)<\/a><\/td>\nCVE-2016-10246<\/td>\n<\/tr>\n
libav: null pointer dereference in get_vlc2 (get_bits.h)<\/a><\/td>\nCVE-2016-8676<\/td>\n<\/tr>\n
mupdf: mujstest: strcpy-param-overlap in main (jstest_main.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libdwarf: tag_tree_build and tag_attr_build: signed shift<\/a><\/td>\n<\/td>\n<\/tr>\n
libdwarf: heap-based buffer overflow in _dwarf_get_abbrev_for_code (dwarf_util.c)<\/a><\/td>\nCVE-2016-8680<\/td>\n<\/tr>\n
libav: invalid memory access in ff_put_pixels8_mmx (fpel_mmx.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libdwarf: heap-based buffer overflow in _dwarf_get_abbrev_for_code (dwarf_util.c)<\/a><\/td>\nCVE-2016-8681<\/td>\n<\/tr>\n
libdwarf: heap-based buffer overflow in _dwarf_get_size_of_val (dwarf_util.c) (ANOTHER ONE)<\/a><\/td>\nCVE-2016-8679<\/td>\n<\/tr>\n
imagemagick: heap-based buffer overflow in IsPixelMonochrome (pixel-accessor.h)<\/a><\/td>\nCVE-2016-8678<\/td>\n<\/tr>\n
imagemagick: memory allocate failure in AcquireQuantumPixels (quantum.c)<\/a><\/td>\nCVE-2016-8677<\/td>\n<\/tr>\n
openssl: libcrypto: stack-based buffer overflow in ERR_error_string_n (err.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c)<\/a><\/td>\nCVE-2016-8690<\/td>\n<\/tr>\n
jasper: two divide-by-zero in jpc_dec_process_siz (jpc_dec.c)<\/a><\/td>\nCVE-2016-8691
\nCVE-2016-8692<\/td>\n<\/tr>\n
jasper: double-free in mem_close (jas_stream.c)<\/a><\/td>\nCVE-2016-8693<\/td>\n<\/tr>\n
imagemagick: memory allocation failure in AcquireMagickMemory (memory.c)<\/a><\/td>\nCVE-2016-8862<\/td>\n<\/tr>\n
jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c)<\/a><\/td>\nCVE-2016-8887<\/td>\n<\/tr>\n
jasper: memory allocation failure in jas_malloc (jas_malloc.c)<\/a><\/td>\nCVE-2016-8886<\/td>\n<\/tr>\n
jasper: two NULL pointer dereference in bmp_getdata (bmp_dec.c) (Incomplete fix for CVE-2016-8690)<\/a><\/td>\nCVE-2016-8884
\nCVE-2016-8885<\/td>\n<\/tr>\n
snzip: memory allocation failure in work_buffer_resize (snzip.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libwmf: memory allocation failure in wmf_malloc (api.c)<\/a><\/td>\nCVE-2016-9011<\/td>\n<\/tr>\n
imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862)<\/a><\/td>\nCVE-2016-8866<\/td>\n<\/tr>\n
jasper: NULL pointer dereference in jpc_tsfb_synthesize (jpc_tsfb.c)<\/a><\/td>\nCVE-2016-10248<\/td>\n<\/tr>\n
jasper: heap-based buffer overflow in jpc_dec_tiledecode (jpc_dec.c)<\/a><\/td>\nCVE-2016-10249<\/td>\n<\/tr>\n
jasper: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887)<\/a><\/td>\nCVE-2016-10250<\/td>\n<\/tr>\n
jasper: use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)<\/a><\/td>\nCVE-2016-10251<\/td>\n<\/tr>\n
elfutils: memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)<\/a><\/td>\nCVE-2016-10255<\/td>\n<\/tr>\n
elfutils: memory allocation failure in allocate_elf (common.h)<\/a><\/td>\nCVE-2016-10254<\/td>\n<\/tr>\n
jasper: use after free in jas_realloc (jas_malloc.c)<\/a><\/td>\nCVE-2016-9262<\/td>\n<\/tr>\n
libdwarf: heap-based buffer overflow in _dwarf_skim_forms (dwarf_macro5.c)<\/a><\/td>\nCVE-2016-9275<\/td>\n<\/tr>\n
libdwarf: heap-based buffer overflow in get_attr_value (print_die.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libdwarf: heap-based buffer overflow in dwarf_get_aranges_list (dwarf_arange.c)<\/a><\/td>\nCVE-2016-9276<\/td>\n<\/tr>\n
libdwarf: memory allocation failure in do_decompress_zlib (dwarf_init_finish.c)<\/a><\/td>\n<\/td>\n<\/tr>\n

\nlibming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c)<\/a><\/td>\n		CVE-2016-9264<\/td>\n<\/tr>\n
libtiff: memory allocation failure in _TIFFCheckRealloc (tif_aux.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libming: listmp3: divide-by-zero in printMP3Headers (listmp3.c)<\/a><\/td>\nCVE-2016-9265<\/td>\n<\/tr>\n
libming: listmp3: left shift in listmp3.c<\/a><\/td>\nCVE-2016-9266<\/td>\n<\/tr>\n
jasper: multiple Assertion failure<\/a><\/td>\nCVE-2016-9387
\nCVE-2016-9388
\nCVE-2016-9389
\nCVE-2016-9390
\nCVE-2016-9391
\nCVE-2016-9392
\nCVE-2016-9393
\nCVE-2016-9394
\nCVE-2016-9395
\nCVE-2016-9396
\nCVE-2016-9397
\nCVE-2016-9398
\nCVE-2016-9399<\/td>\n<\/tr>\n
imagemagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h)<\/a><\/td>\nCVE-2016-9556<\/td>\n<\/tr>\n
jasper: signed integer overflow in jas_image.c<\/a><\/td>\nCVE-2016-9557<\/td>\n<\/tr>\n
libdwarf: negation overflow in dwarf_leb.c<\/a><\/td>\nCVE-2016-9558<\/td>\n<\/tr>\n
imagemagick: null pointer must never be null (tiff.c)<\/a><\/td>\nCVE-2016-9559<\/td>\n<\/tr>\n
jasper: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)<\/a><\/td>\nCVE-2016-9560<\/td>\n<\/tr>\n
metapixel: heap-based buffer overflow in open_gif_file (rwgif.c)<\/a><\/td>\n<\/td>\n<\/tr>\n

\nmetapixel: multiple assertion failures<\/a><\/td>\n		<\/td>\n<\/tr>\n
libav: multiple crashes from the Undefined Behavior Sanitizer<\/a><\/td>\nCVE-2016-9819
\nCVE-2016-9820
\nCVE-2016-9821
\nCVE-2016-9822
\nCVE-2016-9823
\nCVE-2016-9824
\nCVE-2016-9825
\nCVE-2016-9826<\/td>\n<\/tr>\n
imagemagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h) (Incomplete fix for CVE-2016-9556)<\/a><\/td>\nCVE-2016-9556<\/td>\n<\/tr>\n
libming: listswf: heap-based buffer overflow in parseSWF_DEFINEFONT (parser.c)<\/a><\/td>\nCVE-2016-9829<\/td>\n<\/tr>\n
libming: listswf: heap-based buffer overflow in parseSWF_RGBA (parser.c)<\/a><\/td>\nCVE-2016-9831<\/td>\n<\/tr>\n
libming: listswf: heap-based buffer overflow in _iprintf (outputtxt.c)<\/a><\/td>\nCVE-2016-9827<\/td>\n<\/tr>\n
libming: listswf: NULL pointer dereference in dumpBuffer (read.c)<\/a><\/td>\nCVE-2016-9828<\/td>\n<\/tr>\n
graphicsmagick: memory allocation failure in MagickRealloc (memory.c)<\/a><\/td>\nCVE-2016-9830<\/td>\n<\/tr>\n
libtiff: multiple divide-by-zero<\/a><\/td>\nCVE-2016-10266
\nCVE-2016-10267<\/td>\n<\/tr>\n
libtiff: multiple heap-based buffer overflow<\/a><\/td>\nCVE-2016-10092
\nCVE-2016-10093
\nCVE-2016-10094
\nCVE-2016-10268
\nCVE-2016-10269
\nCVE-2016-10270
\nCVE-2016-10271
\nCVE-2016-10272\n<\/td>\n<\/tr>\n
libtiff: invalid memory READ in t2p_writeproc (tiff2pdf.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libtiff: memcpy-param-overlap in t2p_tile_collapse_left (tiff2pdf.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)<\/a><\/td>\nCVE-2016-10095<\/td>\n<\/tr>\n
libtiff: assertion failure in readSeparateTilesIntoBuffer (tiffcp.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libtiff: NULL pointer dereference in TIFFReadRawData (tiffinfo.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
jasper: multiple crashes with UBSAN<\/a><\/td>\nCVE-2017-5498
\nCVE-2017-5499
\nCVE-2017-5500
\nCVE-2017-5501
\nCVE-2017-5502<\/td>\n<\/tr>\n
jasper: invalid memory write in dec_clnpass (jpc_t1dec.c)<\/a><\/td>\nCVE-2017-5503<\/td>\n<\/tr>\n
jasper: invalid memory read in jpc_undo_roi (jpc_dec.c)<\/a><\/td>\nCVE-2017-5504<\/td>\n<\/tr>\n
jasper: invalid memory read in jas_matrix_asl (jas_seq.c)<\/a><\/td>\nCVE-2017-5505<\/td>\n<\/tr>\n
jasper: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)<\/a><\/td>\nCVE-2017-6850<\/td>\n<\/tr>\n
jasper: invalid memory read in jas_matrix_bindsub (jas_seq.c)<\/a><\/td>\nCVE-2017-6851<\/td>\n<\/tr>\n
jasper: heap-based buffer overflow in jpc_dec_decodepkt (jpc_t2dec.c)<\/a><\/td>\nCVE-2017-6852<\/td>\n<\/tr>\n
mp3splt: NULL pointer dereference in main (mp3splt.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
mp3splt: invalid free in free_options (options_manager.c)<\/a><\/td>\nCVE-2017-5666<\/td>\n<\/tr>\n
libmp3splt: NULL pointer dereference in splt_cue_export_to_file (cue.c)<\/a><\/td>\nCVE-2017-5665<\/td>\n<\/tr>\n
mp3splt: NULL pointer dereference in free_options (options_manager.c)<\/a><\/td>\nCVE-2017-5851<\/td>\n<\/tr>\n
pax-utils: scanelf: out of bounds read in scanelf_file_textrel (scanelf.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
pax-utils: scanelf: out of bounds read in scanelf_file_get_symtabs (scanelf.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in PdfInfo::GuessFormat (pdfinfo.cpp)<\/a><\/td>\n<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp)<\/a><\/td>\nCVE-2017-5855<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in PdfOutputStream.cpp<\/a><\/td>\nCVE-2017-5854<\/td>\n<\/tr>\n
podofo: signed integer overflow in PdfParser.cpp<\/a><\/td>\nCVE-2017-5853<\/td>\n<\/tr>\n
podofo: infinite loop in PoDoFo::PdfPage::GetInheritedKeyFromObject (PdfPage.cpp)<\/a><\/td>\nCVE-2017-5852<\/td>\n<\/tr>\n
podofo: heap-based buffer overflow in PoDoFo::PdfTokenizer::GetNextToken (PdfTokenizer.cpp)<\/a><\/td>\nCVE-2017-5886<\/td>\n<\/tr>\n
pax-utils: dumpelf: multiple divide-by-zero in dumpelf.c<\/a><\/td>\n<\/td>\n<\/tr>\n
pax-utils: dumpelf: two invalid memory read in dumpelf.c<\/a><\/td>\n<\/td>\n<\/tr>\n
pax-utils: dumpelf: out of bounds read in dump_notes (dumpelf.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
zziplib: heap-based buffer overflow in __zzip_get32 (fetch.c)<\/a><\/td>\nCVE-2017-5974<\/td>\n<\/tr>\n
zziplib: heap-based buffer overflow in __zzip_get64 (fetch.c)<\/a><\/td>\nCVE-2017-5975<\/td>\n<\/tr>\n
zziplib: heap-based buffer overflow in zzip_mem_entry_extra_block (memdisk.c)<\/a><\/td>\nCVE-2017-5976<\/td>\n<\/tr>\n
zziplib: invalid memory read in zzip_mem_entry_extra_block (memdisk.c)<\/a><\/td>\nCVE-2017-5977<\/td>\n<\/tr>\n
zziplib: NULL pointer dereference in main (unzzipcat-mem.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
zziplib: out of bounds read in zzip_mem_entry_new (memdisk.c)<\/a><\/td>\nCVE-2017-5978<\/td>\n<\/tr>\n
zziplib: NULL pointer dereference in prescan_entry (fseeko.c)<\/a><\/td>\nCVE-2017-5979<\/td>\n<\/tr>\n
zziplib: NULL pointer dereference in zzip_mem_entry_new (memdisk.c)<\/a><\/td>\nCVE-2017-5980<\/td>\n
zziplib: NULL pointer dereference in main (unzzipcat.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
zziplib: load of misaligned address in memdisk.c<\/a><\/td>\n<\/td>\n<\/tr>\n
zziplib: assertion failure in seeko.c<\/a><\/td>\nCVE-2017-5981<\/td>\n<\/tr>\n
mupdf: use-after-free in fz_subsample_pixmap (pixmap.c)<\/a><\/td>\nCVE-2017-7264<\/td>\n<\/tr>\n
mupdf: mujstest: stack-based buffer overflow in main (jstest_main.c)<\/a><\/td>\nCVE-2017-6060<\/td>\n<\/tr>\n
audiofile: heap-based buffer overflow in MSADPCM::initializeCoefficients (MSADPCM.cpp)<\/a><\/td>\nCVE-2017-6827<\/td>\n<\/tr>\n
audiofile: heap-based buffer overflow in readValue (FileHandle.cpp)<\/a><\/td>\nCVE-2017-6828<\/td>\n<\/tr>\n
audiofile: global buffer overflow in decodeSample (IMA.cpp)<\/a><\/td>\nCVE-2017-6829<\/td>\n<\/tr>\n
audiofile: heap-based buffer overflow in alaw2linear_buf (G711.cpp)<\/a><\/td>\nCVE-2017-6830<\/td>\n<\/tr>\n
audiofile: heap-based buffer overflow in IMA::decodeBlockWAVE (IMA.cpp)<\/a><\/td>\nCVE-2017-6831<\/td>\n<\/tr>\n
audiofile: heap-based buffer overflow in MSADPCM::decodeBlock (MSADPCM.cpp)<\/a><\/td>\nCVE-2017-6832<\/td>\n<\/tr>\n
audiofile: divide-by-zero in BlockCodec::runPull (BlockCodec.cpp)<\/a><\/td>\nCVE-2017-6833<\/td>\n<\/tr>\n
audiofile: heap-based buffer overflow in ulaw2linear_buf (G711.cpp)<\/a><\/td>\nCVE-2017-6834<\/td>\n<\/tr>\n
audiofile: divide-by-zero in BlockCodec::reset1 (BlockCodec.cpp)<\/a><\/td>\nCVE-2017-6835<\/td>\n<\/tr>\n
audiofile: heap-based buffer overflow in Expand3To4Module::run (SimpleModule.h)<\/a><\/td>\nCVE-2017-6836<\/td>\n<\/tr>\n
audiofile: multiple ubsan crashes<\/a><\/td>\nCVE-2017-6837
\nCVE-2017-6838
\nCVE-2017-6839<\/td>\n<\/tr>\n
gnu-paxutils: multiple crashes<\/a><\/td>\n<\/td>\n<\/tr>\n
pax-utils: scanelf: out of bounds read in scanelf_file_get_symtabs (scanelf.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
podofo: invalid memory read in ColorChanger::GetColorFromStack (colorchanger.cpp)<\/a><\/td>\nCVE-2017-6840<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement (graphicsstack.h)<\/a><\/td>\nCVE-2017-6841<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in ColorChanger::GetColorFromStack (colorchanger.cpp)<\/a><\/td>\nCVE-2017-6842<\/td>\n<\/tr>\n
podofo: heap-based buffer overflow in PoDoFo::PdfVariant::DelayedLoad (PdfVariant.h)<\/a><\/td>\nCVE-2017-6843<\/td>\n<\/tr>\n
podofo: global buffer overflow in PoDoFo::PdfParser::ReadXRefSubsection (PdfParser.cpp)<\/a><\/td>\nCVE-2017-6844<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in PoDoFo::PdfColor::operator= (PdfColor.cpp)<\/a><\/td>\nCVE-2017-6845<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace (graphicsstack.h)<\/a><\/td>\nCVE-2017-6846<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in PoDoFo::PdfVariant::DelayedLoad (PdfVariant.h)<\/a><\/td>\nCVE-2017-6847<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in PoDoFo::PdfXObject::PdfXObject (PdfXObject.cpp)<\/a><\/td>\nCVE-2017-6848<\/td>\n<\/tr>\n
podofo: NULL pointer dereference in PoDoFo::PdfColorGray::~PdfColorGray (PdfColor.cpp)<\/a><\/td>\nCVE-2017-6849<\/td>\n<\/tr>\n
potrace: heap-based buffer overflow in bm_readbody_bmp (bitmap_io.c) (incomplete fix for CVE-2016-8698)<\/a><\/td>\nCVE-2017-7263<\/td>\n<\/tr>\n
libpcre: invalid memory read in phar (pcretest.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libpcre: NULL pointer dereference in main (pcretest.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libpcre: invalid memory read in match (pcre_exec.c)<\/a><\/td>\nCVE-2017-7186<\/td>\n<\/tr>\n
libpcre: two stack-based buffer overflow write in pcre32_copy_substring (pcre_get.c)<\/a><\/td>\nCVE-2017-7245
\nCVE-2017-7246<\/td>\n<\/tr>\n
libpcre: heap-based bufffer overflow in regexflip8_or_16 (pcretest.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
libpcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)<\/a><\/td>\nCVE-2017-7244<\/td>\n<\/tr>\n
imagemagick: memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862 and CVE-2016-8866)<\/a><\/td>\nCVE-2017-7275<\/td>\n<\/tr>\n
podofo: heap-based buffer overflow in PoDoFo::PdfPainter::ExpandTabs (PdfPainter.cpp)<\/a><\/td>\nCVE-2017-7378<\/td>\n<\/tr>\n
podofo: heap-based buffer overflow in PoDoFo::PdfSimpleEncoding::ConvertToEncoding (PdfEncoding.cpp)<\/a><\/td>\nCVE-2017-7379<\/td>\n<\/tr>\n
podofo: four null pointer dereference<\/a><\/td>\nCVE-2017-7380
\nCVE-2017-7381
\nCVE-2017-7382
\nCVE-2017-7383<\/td>\n<\/tr>\n
libtiff: divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)<\/a><\/td>\nCVE-2017-7595<\/td>\n<\/tr>\n
libtiff: multiple UBSAN crashes<\/a><\/td>\n2017-7596
\n2017-7597
\n2017-7598
\n2017-7599
\n2017-7600
\n2017-7601
\n2017-7602<\/td>\n<\/tr>\n
libaacplus: signed integer overflow, left shift and assertion failure<\/a><\/td>\nCVE-2017-7603
\nCVE-2017-7604
\nCVE-2017-7605<\/td>\n<\/tr>\n
imagemagick: undefined behavior in coders\/rle.c<\/a><\/td>\nCVE-2017-7606<\/td>\n<\/tr>\n
elfutils: heap-based buffer overflow in handle_gnu_hash (readelf.c)<\/a><\/td>\nCVE-2017-7607<\/td>\n<\/tr>\n
elfutils: heap-based buffer overflow in ebl_object_note_type_name (eblobjnotetypename.c)<\/a><\/td>\nCVE-2017-7608<\/td>\n<\/tr>\n
elfutils: memory allocation failure in __libelf_decompress (elf_compress.c)<\/a><\/td>\nCVE-2017-7609<\/td>\n<\/tr>\n
elfutils: heap-based buffer overflow in check_group (elflint.c)<\/a><\/td>\nCVE-2017-7610<\/td>\n<\/tr>\n
elfutils: heap-based buffer overflow in check_symtab_shndx (elflint.c)<\/a><\/td>\nCVE-2017-7611<\/td>\n<\/tr>\n
elfutils: heap-based buffer overflow in check_sysv_hash (elflint.c)<\/a><\/td>\nCVE-2017-7612<\/td>\n<\/tr>\n
elfutils: memory allocation failure in xcalloc (xmalloc.c)<\/a><\/td>\nCVE-2017-7613<\/td>\n
binutils: two NULL pointer dereference in elflink.c<\/a><\/td>\nCVE-2017-7614<\/td>\n<\/tr>\n
libsamplerate: global buffer overflow in calc_output_single (src_sinc.c)<\/a><\/td>\nCVE-2017-7697<\/td>\n<\/tr>\n
libsndfile: invalid memory READ and invalid memory WRITE in flac_buffer_copy (flac.c)<\/a><\/td>\nCVE-2017-7741
\nCVE-2017-7742<\/td>\n<\/tr>\n
libcroco: heap overflow and undefined behavior<\/a><\/td>\nCVE-2017-7960
\nCVE-2017-7961<\/td>\n<\/tr>\n
imageworsener: divide-by-zero in iwgif_record_pixel (imagew-gif.c)<\/a><\/td>\nCVE-2017-7962<\/td>\n<\/tr>\n
imageworsener: memory allocation failure in my_mallocfn (imagew-cmd.c)<\/a><\/td>\nCVE-2017-8327<\/td>\n<\/tr>\n
imageworsener: two left shift<\/a><\/td>\nCVE-2017-8326<\/td>\n<\/tr>\n
imageworsener: heap-based buffer overflow in iw_process_cols_to_intermediate (imagew-main.c)<\/a><\/td>\nCVE-2017-8325<\/td>\n<\/tr>\n
libsndfile: invalid memory read in flac_buffer_copy (flac.c)<\/a><\/td>\nCVE-2017-8362<\/td>\n<\/tr>\n
libsndfile: global buffer overflow in flac_buffer_copy (flac.c)<\/a><\/td>\nCVE-2017-8361<\/td>\n<\/tr>\n
libsndfile: heap-based buffer overflow in flac_buffer_copy (flac.c)<\/a><\/td>\nCVE-2017-8363<\/td>\n<\/tr>\n
libsndfile: global buffer overflow in i2les_array (pcm.c)<\/a><\/td>\nCVE-2017-8365<\/td>\n<\/tr>\n
libpcre: heap-based buffer overflow write in pcre2test.c<\/a><\/td>\nCVE-2017-8786<\/td>\n<\/tr>\n
ettercap: etterfilter: heap-based buffer overflow write<\/a><\/td>\nCVE-2017-8366<\/td>\n<\/tr>\n
rzip: heap-based buffer overflow in read_buf (stream.c)<\/a><\/td>\nCVE-2017-8364<\/td>\n<\/tr>\n
libmad: heap-based buffer overflow in mad_bit_skip (bit.c)<\/a><\/td>\nCVE-2017-8374<\/td>\n<\/tr>\n
libmad: heap-based buffer overflow in mad_layer_III (layer3.c)<\/a><\/td>\nCVE-2017-8373<\/td>\n<\/tr>\n
libmad: assertion failure in layer3.c<\/a><\/td>\nCVE-2017-8372<\/td>\n<\/tr>\n
telegram-desktop: insecure permission of $HOME\/.TelegramDesktop directory<\/a><\/td>\nCVE-2016-10351<\/td>\n<\/tr>\n
libarchive: two heap-based buffer overflow read<\/a><\/td>\nCVE-2016-10349
\nCVE-2016-10350<\/td>\n<\/tr>\n
lrzip: divide-by-zero in bufRead::get (libzpaq.h)<\/a><\/td>\nCVE-2017-8842<\/td>\n<\/tr>\n
lrzip: NULL pointer dereference in bufRead::get (libzpaq.h)<\/a><\/td>\nCVE-2017-8847<\/td>\n<\/tr>\n
lrzip: NULL pointer dereference in join_pthread (stream.c)<\/a><\/td>\nCVE-2017-8843<\/td>\n<\/tr>\n
lrzip: invalid memory read in lzo_decompress_buf (stream.c)<\/a><\/td>\nCVE-2017-8845<\/td>\n<\/tr>\n
lrzip: heap-based buffer overflow write in read_1g (stream.c)<\/a><\/td>\nCVE-2017-8844<\/td>\n<\/tr>\n
lrzip: use-after-free in read_stream (stream.c)<\/a><\/td>\nCVE-2017-8846<\/td>\n<\/tr>\n
binutils: multiple crashes<\/a><\/td>\nCVE-2017-9038
\nCVE-2017-9039
\nCVE-2017-9040
\nCVE-2017-9041
\nCVE-2017-9042
\nCVE-2017-9043
\nCVE-2017-9044<\/td>\n<\/tr>\n
autotrace: multiple vulnerabilities (The autotrace nightmare)<\/a><\/td>\nCVE-2017-9151
\nCVE-2017-9152
\nCVE-2017-9153
\nCVE-2017-9154
\nCVE-2017-9155
\nCVE-2017-9156
\nCVE-2017-9157
\nCVE-2017-9158
\nCVE-2017-9159
\nCVE-2017-9160
\nCVE-2017-9161
\nCVE-2017-9162
\nCVE-2017-9163
\nCVE-2017-9164
\nCVE-2017-9165
\nCVE-2017-9166
\nCVE-2017-9167
\nCVE-2017-9168
\nCVE-2017-9169
\nCVE-2017-9170
\nCVE-2017-9171
\nCVE-2017-9172
\nCVE-2017-9173
\nCVE-2017-9174
\nCVE-2017-9175
\nCVE-2017-9176
\nCVE-2017-9177
\nCVE-2017-9178
\nCVE-2017-9179
\nCVE-2017-9180
\nCVE-2017-9181
\nCVE-2017-9182
\nCVE-2017-9183
\nCVE-2017-9184
\nCVE-2017-9185
\nCVE-2017-9186
\nCVE-2017-9187
\nCVE-2017-9188
\nCVE-2017-9189
\nCVE-2017-9190
\nCVE-2017-9191
\nCVE-2017-9192
\nCVE-2017-9193
\nCVE-2017-9194
\nCVE-2017-9195
\nCVE-2017-9196
\nCVE-2017-9197
\nCVE-2017-9198
\nCVE-2017-9199
\nCVE-2017-9200<\/td>\n<\/tr>\n
imageworsener: multiple vulnerabilities<\/a><\/td>\nCVE-2017-9201
\nCVE-2017-9202
\nCVE-2017-9203
\nCVE-2017-9204
\nCVE-2017-9205
\nCVE-2017-9206
\nCVE-2017-9207<\/td>\n<\/tr>\n
qpdf: three infinite loop in libqpdf<\/a><\/td>\nCVE-2017-9208
\nCVE-2017-9209
\nCVE-2017-9210<\/td>\n<\/tr>\n
ytnef: heap-based buffer overflow in PrintTNEF (ytnefprint\/main.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
ytnef: NULL pointer dereference in MAPIPrint (ytnef.c)<\/a><\/td>\nCVE-2017-9470<\/td>\n<\/tr>\n
ytnef: heap-based-buffer overflow in SwapWord (ytnef.c)<\/a><\/td>\nCVE-2017-9471<\/td>\n<\/tr>\n
ytnef: heap-based buffer overflow in SwapDWord (ytnef.c)<\/a><\/td>\nCVE-2017-9472<\/td>\n<\/tr>\n
ytnef: memory allocation failure in TNEFFillMapi (ytnef.c)<\/a><\/td>\nCVE-2017-9473<\/td>\n<\/tr>\n
ytnef: heap-based buffer overflow in DecompressRTF (ytnef.c)<\/a><\/td>\nCVE-2017-9474<\/td>\n<\/tr>\n
lame: divide-by-zero in parse_wave_header (get_audio.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
lame: global-buffer-overflow in II_step_one (layer2.c)<\/a><\/td>\nCVE-2017-9869<\/td>\n<\/tr>\n
lame: global-buffer-overflow in III_i_stereo (layer3.c)<\/a><\/td>\nCVE-2017-9870<\/td>\n<\/tr>\n
lame: heap-based buffer overflow in fill_buffer_resample (util.c)<\/a><\/td>\nCVE-2015-9101<\/td>\n<\/tr>\n
lame: stack-based buffer overflow in III_i_stereo (layer3.c)<\/a><\/td>\nCVE-2017-9871<\/td>\n<\/tr>\n
lame: stack-based buffer overflow in III_dequantize_sample (layer3.c)<\/a><\/td>\nCVE-2017-9872<\/td>\n<\/tr>\n
lame: multiple left shift<\/a><\/td>\n<\/td>\n<\/tr>\n
lame: two UBSAN crashes<\/a><\/td>\n<\/td>\n<\/tr>\n
xar: NULL pointer dereference in xar_unserialize (archive.c)<\/a><\/td>\nCVE-2017-11124<\/td>\n<\/tr>\n
xar: NULL pointer dereference in xar_get_path (util.c)<\/a><\/td>\nCVE-2017-11125<\/td>\n<\/tr>\n
mpg123: global buffer overflow in III_i_stereo (layer3.c)<\/a><\/td>\nCVE-2017-11126<\/td>\n<\/tr>\n
graphicsmagick: use-after-free in CloseBlob (blob.c)<\/a><\/td>\nCVE-2017-11403<\/td>\n<\/tr>\n
graphicsmagick: use-after-free in ReadWMFImage (wmf.c)<\/a><\/td>\nCVE-2017-12936<\/td>\n<\/tr>\n
graphicsmagick: invalid memory read in SetImageColorCallBack (image.c)<\/a><\/td>\nCVE-2017-12935<\/td>\n<\/tr>\n
graphicsmagick: heap-based buffer overflow in ReadSUNImage (sun.c)<\/a><\/td>\nCVE-2017-12937<\/td>\n<\/tr>\n
libfpx: double-free in DfFromLB (docfile.cxx)<\/a><\/td>\nCVE-2017-12925<\/td>\n<\/tr>\n
libfpx: heap-based buffer overflow in OLEStream::WriteVT_LPSTR (olestrm.cpp)<\/a><\/td>\nCVE-2017-12919<\/td>\n<\/tr>\n
libfpx: NULL pointer dereference in CDirectory::GetDirEntry (dir.cxx)<\/a><\/td>\nCVE-2017-12920<\/td>\n<\/tr>\n
libfpx: NULL pointer dereference in wchar.c<\/a><\/td>\nCVE-2017-12922<\/td>\n<\/tr>\n
libfpx: NULL pointer dereference in PFileFlashPixView::GetGlobalInfoProperty (f_fpxvw.cpp)<\/a><\/td>\nCVE-2017-12921<\/td>\n<\/tr>\n
libfpx: NULL pointer dereference in OLEStream::WriteVT_LPSTR (olestrm.cpp)<\/a><\/td>\nCVE-2017-12923<\/td>\n<\/tr>\n
libfpx: divide-by-zero in CDirVector::GetTable (dirfunc.hxx)<\/a><\/td>\nCVE-2017-12924<\/td>\n<\/tr>\n
imagemagick: use-after-free in DestroyImage (image.c)<\/a><\/td>\nCVE-2017-12877<\/td>\n<\/tr>\n
imagemagick: heap-based buffer overflow in .omp_outlined..32 (enhance.c)<\/a><\/td>\nCVE-2017-12876<\/td>\n<\/tr>\n
openjpeg: memory allocation failure in opj_aligned_alloc_n (opj_malloc.c)<\/a><\/td>\nCVE-2017-12982<\/td>\n<\/tr>\n
openjpeg: heap-based buffer overflow in opj_mqc_flush (mqc.c)<\/a><\/td>\nCVE-2017-14151<\/td>\n<\/tr>\n
openjpeg: heap-based buffer overflow in opj_write_bytes_LE (cio.c)<\/a><\/td>\nCVE-2017-14152<\/td>\n<\/tr>\nopenjpeg: heap-based buffer overflow in opj_t2_encode_packet (t2.c)<\/a><\/td>\nCVE-2017-14039<\/td>\n<\/tr>\n
openjpeg: invalid memory write in tgatoimage (convert.c)<\/a><\/td>\nCVE-2017-14040<\/td>\n<\/tr>\n
openjpeg: stack-based buffer overflow write in pgxtoimage (convert.c)<\/a><\/td>\nCVE-2017-14041<\/td>\n<\/tr>\n
graphicsmagick: memory allocation failure in MagickRealloc (memory.c)<\/a><\/td>\nCVE-2017-14042<\/td>\n<\/tr>\n
graphicsmagick: use-after-free in CloseBlob (blob.c) (INCOMPLETE FIX FOR CVE-2017-11403)<\/a><\/td>\nCVE-2017-14103<\/td>\n<\/tr>\n
libzip: memory allocation failure in _zip_cdir_grow (zip_dirent.c)<\/a><\/td>\nCVE-2017-14107<\/td>\n<\/tr>\n
libzip: use-after-free in _zip_buffer_free (zip_buffer.c)<\/a><\/td>\nCVE-2017-12858<\/td>\n<\/tr>\n
openjpeg: heap-based buffer overflow in opj_write_bytes_LE (cio.c) (INCOMPLETE FIX FOR CVE-2017-14152)<\/a><\/td>\nCVE-2017-14164<\/td>\n<\/tr>\n
graphicsmagick: memory allocation failure in MagickMalloc (memory.c)<\/a><\/td>\nCVE-2017-14165<\/td>\n<\/tr>\n
libarchive: heap-based buffer overflow in xml_data (archive_read_support_format_xar.c)<\/a><\/td>\nCVE-2017-14166<\/td>\n<\/tr>\n
aacplusenc: NULL pointer dereference in DeleteBitBuffer (bitbuffer.c)<\/a><\/td>\nCVE-2017-14181<\/td>\n<\/tr>\n
mp3gain: stack-based buffer overflow in filterYule (gain_analysis.c)<\/a><\/td>\nCVE-2017-14407<\/td>\n<\/tr>\n
mp3gain: NULL pointer dereference in sync_buffer (mpglibDBL\/interface.c)<\/a><\/td>\nCVE-2017-14406<\/td>\n<\/tr>\n
mp3gain: stack-based buffer overflow in copy_mp (mpglibDBL\/interface.c)<\/a><\/td>\nCVE-2017-14411<\/td>\n<\/tr>\n
mp3gain: memcpy-param-overlap in set_pointer (mpglibDBL\/common.c)<\/a><\/td>\n<\/td>\n<\/tr>\n
mp3gain: global buffer overflow in III_dequantize_sample (mpglibDBL\/layer3.c)<\/a><\/td>\nCVE-2017-14409<\/td>\n<\/tr>\n
mp3gain: stack-based buffer overflow in dct36 (mpglibDBL\/layer3.c)<\/a><\/td>\nCVE-2017-14408<\/td>\n<\/tr>\n
mp3gain: invalid memory write in copy_mp (mpglibDBL\/interface.c)<\/a><\/td>\nCVE-2017-14412<\/td>\n<\/tr>\n
mp3gain: global buffer overflow in III_i_stereo (mpglibDBL\/layer3.c)<\/a><\/td>\nCVE-2017-14410<\/td>\n<\/tr>\n
bento4: heap-based buffer overflow in AP4_BitStream::ReadBytes (Ap4BitStream.cpp)<\/a><\/td>\nCVE-2017-14645<\/td>\n<\/tr>\n
bento4: NULL pointer dereference in AP4_Atom::SetType (Ap4Atom.h)<\/a><\/td>\nCVE-2017-14638<\/td>\n<\/tr>\n
bento4: NULL pointer dereference in AP4_AtomSampleTable::GetSample (Ap4AtomSampleTable.cpp)<\/a><\/td>\nCVE-2017-14640<\/td>\n<\/tr>\n
bento4: NULL pointer dereference in AP4_DataAtom::~AP4_DataAtom (Ap4MetaData.cpp)<\/a><\/td>\nCVE-2017-14641<\/td>\n<\/tr>\n
bento4: NULL pointer dereference in AP4_StdcFileByteStream::ReadPartial (Ap4StdCFileByteStream.cpp)<\/a><\/td>\nCVE-2017-14642<\/td>\n<\/tr>\n
bento4: heap-based buffer overflow in AP4_HdlrAtom::AP4_HdlrAtom (Ap4HdlrAtom.cpp)<\/a><\/td>\nCVE-2017-14644<\/td>\n<\/tr>\n
bento4: heap-based buffer overflow in AP4_BytesToUInt32BE (Ap4Utils.h)<\/a><\/td>\nCVE-2017-14643<\/td>\n<\/tr>\n
bento4: heap-based buffer overflow in AP4_DataBuffer::SetData (Ap4DataBuffer.cpp)<\/a><\/td>\nCVE-2017-14646<\/td>\n<\/tr>\n
bento4: stack-based buffer overflow in AP4_VisualSampleEntry::ReadFields (Ap4SampleEntry.cpp)<\/a><\/td>\nCVE-2017-14647<\/td>\n<\/tr>\n
bento4: stack-based buffer underflow in AP4_VisualSampleEntry::ReadFields (Ap4SampleEntry.cpp)<\/a><\/td>\nCVE-2017-14639<\/td>\n<\/tr>\n
bladeenc: global buffer overflow in iteration_loop (loop.c)<\/a><\/td>\nCVE-2017-14648<\/td>\n<\/tr>\n
graphicsmagick: assertion failure in pixel_cache.c<\/a><\/td>\nCVE-2017-14649<\/td>\n<\/tr>\n
binutils: heap-based buffer overflow in _bfd_x86_elf_get_synthetic_symtab (elfxx-x86.c)<\/a><\/td>\nCVE-2017-14729<\/td>\n<\/tr>\n
binutils: memory allocation failure in _bfd_elf_slurp_version_tables (elf.c)<\/a><\/td>\nCVE-2017-14938<\/td>\n<\/tr>\n
binutils: NULL pointer dereference in scan_unit_for_symbols (dwarf2.c)<\/a><\/td>\nCVE-2017-14940<\/td>\n<\/tr>\n
binutils: heap-based buffer overflow in read_1_byte (dwarf2.c)<\/a><\/td>\nCVE-2017-14939<\/td>\n<\/tr>\n
binutils: infinite loop in find_abstract_instance_name (dwarf2.c)<\/a><\/td>\nCVE-2017-15024<\/td>\n<\/tr>\n
binutils: divide-by-zero in decode_line_info (dwarf2.c)<\/a><\/td>\nCVE-2017-15025<\/td>\n<\/tr>\n
binutils: heap-based buffer overflow in bfd_getl32 (opncls.c)<\/a><\/td>\nCVE-2017-15021<\/td>\n<\/tr>\n
binutils: NULL pointer dereference in concat_filename (dwarf2.c)<\/a><\/td>\nCVE-2017-15023<\/td>\n<\/tr>\n
binutils: NULL pointer dereference in bfd_hash_hash (hash.c)<\/a><\/td>\nCVE-2017-15022<\/td>\n<\/tr>\n
binutils: heap-based buffer overflow in parse_die (dwarf1.c)<\/a><\/td>\nCVE-2017-15020<\/td>\n<\/tr>\n<\/tr>\n
Why I stopped fuzzing research<\/a><\/td>\n<\/td>\n<\/tr>\n
re2c: heap overflow in Scanner::fill (scanner.cc)<\/a><\/td>\nCVE-2020-11958<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

All advisories are also grouped under the tag advisories<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Below, a table which summarizes: – Vulnerabilities found by me; – Bugs spotted by ASan\/fuzzers\/$other_tools that are not security relevant. Summary CVE libav: divide-by-zero in ff_h263_decode_mba(ituh263dec.c) CVE-2015-5479 portage-utils: heap-based buffer overflow in show_sync_history (qlop.c) portage-utils: stack-based buffer overflow in prepare_qfile_args … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":140,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"spay_email":""},"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/P2EaBc-4k","_links":{"self":[{"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/pages\/268"}],"collection":[{"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/users\/140"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/comments?post=268"}],"version-history":[{"count":130,"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/pages\/268\/revisions"}],"predecessor-version":[{"id":2468,"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/pages\/268\/revisions\/2468"}],"wp:attachment":[{"href":"https:\/\/blogs.gentoo.org\/ago\/wp-json\/wp\/v2\/media?parent=268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}