[SECURITY] Fedora 30 Update: rdesktop-1.8.6-1.fc30

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol RDP in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required...

CVE-2019-10988

Affected product: Philips HDI 4000 Ultrasound Systems (all versions on old, unsupported OS such as Windows 2000). Root cause: Use of obsolete function CWE-477 in the system’s software, enabling exploitation. Impact: CVSS v3 base score 3.0; potential exposure of ultrasound images and integrity com...

USN-4109-1: OpenJPEG vulnerabilities

It was discovered that OpenJPEG incorrectly handled certain PGX files. An attacker could possibly use this issue to cause a denial of service or possibly remote code execution. CVE-2017-17480 It was discovered that OpenJPEG incorrectly handled certain files. An attacker could possibly use this...

exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

Debian DLA-1851-1 : openjpeg2 security update

Two security vulnerabilities were discovered in openjpeg2, a JPEG 2000 image library. CVE-2016-9112 A floating point exception or divide by zero in the function opjpinextcprl may lead to a denial of service. CVE-2018-20847 An improper computation of values in the function opjgetencodingparameters...

Debian: Security Advisory (DLA-1851-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1851-1] openjpeg2 security update

Package : openjpeg2 Version : 2.1.0-2+deb8u7 CVE ID : CVE-2016-9112 CVE-2018-20847 Debian Bug : 931294 844551 Two security vulnerabilities were discovered in openjpeg2, a JPEG 2000 image library. CVE-2016-9112 A floating point exception or divide by zero in the function opjpinextcprl may lead to ...

Packet Sanity (CVE-1999-0193; CVE-1999-0675; CVE-2000-0221; CVE-2002-1071; CVE-2003-1029; CVE-2004-0247; CVE-2004-1109; CVE-2007-1804; CVE-2007-3026; CVE-2008-7127; CVE-2010-1185; CVE-2011-0975; CVE-2012-6638; CVE-2014-3000)

...

Working BlueKeep Exploit Developed by DHS

The Department of Homeland Security has confirmed it has developed a working exploit for the “wormable” BlueKeep vulnerability. The agency issued an alert on Monday urging Windows users to update their machines as soon as possible. The alert heightens concerns that malicious actors could soon als...

CVE-2019-6957

A recently discovered security vulnerability affects all Bosch Video Management System BVMS versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager VRM, Video Streaming Gateway VSG, Configuration Manager, Building Integration System BIS with Video Engine, Access...

Rockwell Automation/Allen-Bradley GuardPLC 2000 PLC Detection

Binary data 754869.prm...

CVE-2019-8952

A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files on the system via the network interface. Affected hardware products: Bosch DIVAR IP 2000 vulnerable...

CVE-2019-8951

An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch DIVAR IP 2000 vulnerable versions: 3.10; 3.20; 3.21; 3.50;...

Fedora Update for openjpeg2 FEDORA-2018-87c15da28c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Use-After-Free

JasPer is vulnerable to a use-after-free attacks. Incorrect decoding of certain JPEG 2000 image files allow remote attackers to cause application crash resulting in denial of service conditions. Affected component is JPEG 2000 Image Handler...

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause invalid reads and application crash via a crafted JPEG 2000 image. This issue affects the function jasmatrixclip of the file jasseq.c of the component JPEG 2000 Image Handler...

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause an application crash via resourcememory exhaustion. Affected is the function jasiccprofcreatefrombuf of the component JPEG 2000 Image Handler...

Denial Of Service (DoS)

Jasper is vulnerable to denial of serviceDoS attacks. An attacker could execute arbitrary code or cause an application crash via a crafted color profile in a JPEG 2000 image leading to a double free vulnerability. Affected function is jasiccattrvaldestroy...

Denial Of Service (DoS)

JasPer is vulnerable to denial of service attacks. A remote attacker could cause out-of-bounds read and application crash via a crafted JPEG 2000 image. Affected by this issue is the function jpcpinextcprl of the component JPEG 2000 Image Handler...

Heap-Based Buffer Overflow

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly,...