Leap (Novell) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2017-10-03. Vendor: Novell.

CVEs of Leap

• CVE-2017-14496 - CVSS 7.5 (high), 2017-10-03: Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows…
• CVE-2017-14494 - CVSS 5.9 (medium), 2017-10-03: dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6…
• CVE-2017-13704 - CVSS 7.5 (high), 2017-10-03: In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an…
• CVE-2015-5219 - CVSS 7.5 (high), 2017-07-21: The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote…
• CVE-2014-9853 - CVSS 5.5 (medium), 2017-03-17: Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.