Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2017-12-22 CVE-2017-15311 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Huawei products
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation.
low complexity
huawei CWE-119
8.8
2017-12-22 CVE-2017-10869 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dena H2O
Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors.
network
low complexity
dena CWE-119
7.5
2017-12-21 CVE-2017-17033 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qnap QTS
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
network
low complexity
qnap CWE-119
critical
9.8
2017-12-21 CVE-2017-17032 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qnap QTS
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
network
low complexity
qnap CWE-119
critical
9.8
2017-12-21 CVE-2017-17031 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qnap QTS
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
network
low complexity
qnap CWE-119
critical
9.8
2017-12-21 CVE-2017-17030 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qnap QTS
A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
network
low complexity
qnap CWE-119
critical
9.8
2017-12-21 CVE-2017-17029 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qnap QTS
A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
network
low complexity
qnap CWE-119
critical
9.8
2017-12-21 CVE-2017-17028 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qnap QTS
A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
network
low complexity
qnap CWE-119
critical
9.8
2017-12-21 CVE-2017-17027 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qnap QTS
A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
network
low complexity
qnap CWE-119
critical
9.8
2017-12-21 CVE-2017-17821 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Safari 46
WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because it calls the FastBitVectorWordOwner::resizeSlow function (in WTF/wtf/FastBitVector.cpp) for a purpose other than initializing a bitvector size, and resizeSlow mishandles cases where the old array length is greater than the new array length.
network
low complexity
apple CWE-119
critical
9.8