61 matches found
Oracle Linux 7 : qt5-qtimageformats (ELSA-2021-2328)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2328 advisory. 5.9.7-2 - libwebp security fixes: Resolves: bz1961742 Resolves: bz1961743 Resolves: bz1961744 Resolves: bz1961745 Tenable has extracted the preceding...
Important: Red Hat Security Advisory: qt5-qtimageformats security update
An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Oracle Linux 7 : libwebp (ELSA-2021-2260)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2260 advisory. 0.3.0-10 - Added fixes for rhbz1956829, rhbz1956843, rhbz1956919 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 7 : libwebp (RHSA-2021:2260)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2260 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...
SUSE SLED15: libwebp-devel / libwebp6 / libwebp6-32bit / libwebpdecoder2 / etc (SUSE-SU-2021:1860-1)
The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1860-1 advisory. - CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. - CVE-2020-36330: Fixed heap-based buffer...
Debian DLA-2677-1 : libwebp security update
Multiple security issues have been discovered in libwebp CVE-2018-25009 An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability. CVE-2018-25010 An out-of-bounds read was found in...
[SECURITY] [DLA 2677-1] libwebp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2677-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky June 05, 2021 https://wiki.debian.org/LTS -...
SUSE-SU-2021:1860-1 Security update for libwebp
This update for libwebp fixes the following issues: - CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. - CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign bsc1185691. - CVE-2020-36332: Fixed extreme memory allocation when reading a file bsc1185674...
SUSE SLES12 Security Update : libwebp (SUSE-SU-2021:1830-1)
This update for libwebp fixes the following issues : CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign bsc1185691. CVE-2020-36332: Fixed extreme memory allocation when reading a file bsc1185674...
Ubuntu 18.04 LTS / 20.04 LTS : libwebp vulnerabilities (USN-4971-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4971-1 advisory. It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a...
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...
CVE-2018-25011
CVE-2018-25011 affects libwebp prior to 1.0.1. Root cause: heap-based buffer overflow in PutLE16() that can affect data confidentiality, integrity, and availability. Documentation indicates a patch/update to version 1.0.1 or later; downstream advisories reference this fix in various Linux distrib...
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...
CVE-2019-25011
creationtimestamp| type| source ---|---|--- 2020-12-31 22:31:48+00:00| seen| https://t.me/cibsecurity/21481...
CVE-2019-25011
NetBox
CVE-2020-25011
creationtimestamp| type| source ---|---|--- 2020-12-17 07:42:26+00:00| seen| https://t.me/cibsecurity/20976...
CVE-2020-25011
Kyland KPS2204 6-Port DIN-Rail Serial Device Servers (Software Version R0002.P05) are associated with CVE-2020-25011, describing a sensitive information disclosure where remote attackers can obtain usernames and passwords by calling /cgi-bin/webadminget.cgi via a browser. Available documents show...