Vulnerabilities > Debian > Debian Linux > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-03-08 CVE-2018-7872 NULL Pointer Dereference vulnerability in multiple products
An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data.
4.3
2018-03-08 CVE-2018-7871 Out-of-bounds Read vulnerability in multiple products
There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data.
6.8
2018-03-08 CVE-2018-7870 NULL Pointer Dereference vulnerability in multiple products
An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data.
4.3
2018-03-08 CVE-2018-7869 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack.
4.3
2018-03-08 CVE-2018-7868 Out-of-bounds Read vulnerability in multiple products
There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data.
4.3
2018-03-08 CVE-2018-7867 Out-of-bounds Write vulnerability in multiple products
There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf.
4.3
2018-03-08 CVE-2018-7866 NULL Pointer Dereference vulnerability in multiple products
A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8.
network
low complexity
libming debian CWE-476
6.5
2018-03-07 CVE-2018-7752 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.
6.8
2018-03-07 CVE-2018-7740 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Linux Kernel
The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.
local
low complexity
linux redhat canonical debian CWE-119
4.9
2018-03-06 CVE-2018-5729 NULL Pointer Dereference vulnerability in multiple products
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.
network
low complexity
mit fedoraproject debian redhat CWE-476
4.7