CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
From the CWE List. © The MITRE Corporation.
Newest
- ffmpegOff-by-one error in the adpcm_decode_frame function in libavcodec/adpcm.c in FFmpeg before 1.0.4...9.3 High
- dropbear ssh project sshDropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with...5.0 Medium
- dropbear ssh project sshThe buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote...5.0 Medium
- apple mac os xThe kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic)...4.9 Medium
- apple mac os xThe kernel in Apple Mac OS X before 10.9 does not properly handle integer values during...4.9 Medium
- apple mac os xInteger signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause...4.9 Medium
- apple mac os xThe kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2...7.1 High
- feep libtar, redhat enterprise linux +1 moreMultiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow...6.8 Medium
- proftpdInteger overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3 allows remote attackers to...5.0 Medium
- apple iphone osThe kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable,...7.1 High
- tuxfamily chronyMultiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a...5.0 Medium
- siemens scalance x-200, scalance x-200 series firmware, scalance x-200rna +6 more +8 moreThe authentication implementation in the web server on Siemens SCALANCE X-200 switches with...8.3 High
- gnu glibc, debian linux +1 moreOff-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka...7.5 High
- gnu glibc, redhat enterprise linux +1 moreMultiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and...4.3 Medium
- gnu glibcInteger overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier...7.5 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...5.0 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and...5.0 Medium
- adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and...10.0 High
- adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and...10.0 High
- bitcoin bitcoin-qt, core +1 moreThe Bloom Filter implementation in bitcoind and Bitcoin-Qt 0.8.x before 0.8.4rc1 allows remote...5.0 Medium
- apple airport base station firmwareApple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths...5.4 Medium
- konstanty bialkowski libmodplug, debian linux +1 moreInteger overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier...6.8 Medium
- freebsdMultiple integer overflows in the IP_MSFILTER and IPV6_MSFILTER features in (1) sys/netinet...7.2 High
- intel wimax network serviceMultiple integer overflows in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless...7.5 High
- google chrome, debian linux +1 moreMultiple integer overflows in (1) libGLESv2/renderer/Renderer9.cpp and (2) libGLESv2/renderer...7.5 High
- linux kernelOff-by-one error in the build_unc_path_to_root function in fs/cifs/connect.c in the Linux kernel...7.8 High
- ibm lotus dominoInteger overflow in the DWA9W ActiveX control in iNotes in IBM Domino 9.0 before IF3 allows...9.3 High
- sagelighteditor sagelightInteger overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code...9.3 High
- putty, winscp, debian linux +1 more +3 moreInteger overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use...6.8 Medium
- samba, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3...5.0 Medium
- novell clientInteger overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP...7.2 High
- wiresharkInteger signedness error in the dissect_headers function in epan/dissectors/packet-btobex.c in...7.8 High
- wiresharkInteger signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator...5.0 Medium
- wiresharkOff-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c...5.0 Medium
- wiresharkThe dissect_per_length_determinant function in epan/dissectors/packet-per.c in the ASN.1 PER...4.3 Medium
- wiresharkThe parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1...7.8 High
- wiresharkInteger signedness error in the get_type_length function in epan/dissectors/packet-btsdp.c in the...7.8 High
- cmu cyrus-saslCyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned...4.3 Medium
- videolan vlc media playerThe SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user...4.3 Medium
- adobe flash playerInteger overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on...10.0 High
- xenThe Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain...6.9 Medium
- xenMultiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest...6.9 Medium
- autotrace project autotraceInteger underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows...6.8 Medium
- phpInteger overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before...5.0 Medium
- microsoft windows 7, windows 8, windows rt +2 more +4 moreInteger overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server...7.1 High
- ffmpegThe format_line function in log.c in libavutil in FFmpeg before 1.2.1 uses inapplicable offset...4.3 Medium
- wireshark, debian linux, opensuse +2 moreThe dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in...5.0 Medium
- wireshark, debian linux, opensuse +2 moreMultiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet...5.0 Medium
- wireshark, debian linux, opensuse +2 moreMultiple integer overflows in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a...7.8 High
- wireshark, debian linux, opensuse +2 moreepan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses...5.0 Medium
- Show moreLoading…