SUSE: Security Advisory (SUSE-SU-2018:3879-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Update mechanism Passwordstate compromised

Click Studios, the manufacturer of Passwordstate, has announced announced that its automatic update mechanism has been abused to offer malicious files for download. If you meet these criteria: - you are currently using version 9.1 build 9117, - Passwordstate applies updates automatically, - and t...

Oracle Linux 6 : bind (ELSA-2021-9117)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9117 advisory. 32:9.8.2-0.68.rc1.0.1.8 - Backport the fix for buffer overflow CVE-2020-8625 Orabug: 32588749 Tenable has extracted the preceding description block directly fro...

CVE-2020-9117

creationtimestamp| type| source ---|---|--- 2020-12-01 07:53:40+00:00| seen| https://t.me/cibsecurity/16967...

CVE-2020-9117

HUAWEI nova 4 versions earlier than 10.0.0.165C01E34R2P4 and SydneyM-AL00 versions earlier than 10.0.0.165C00E66R1P5 have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected...

CVE-2020-9117

The CVE-2020-9117 entry affects Huawei Nova 4 and SydneyM-AL00 devices with versions earlier than 10.0.0.165 (C01E34R2P4/C00E66R1P5). The vulnerability is an out-of-bounds read and write caused by insufficient validation of a crafted packet parameter, allowing exploitation by an attacker with spe...

CVE-2019-9117

CVE-2019-9117 affects Motorola C1 and M2 routers (firmware 1.01 and 1.07). A command-injection flaw occurs in the HNAP API: when processing SetNetworkTomographySettings, untrusted input from the request body (e.g., tomography_ping_number) can trigger system() and execute arbitrary OS commands, po...

CVE-2019-9117

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2018-9117

CVE-2018-9117 affects WireMock before 2.16.0, where a remote unauthenticated attacker can access local files outside the application directory by sending a specially crafted XML request, i.e., a Directory Traversal. Root cause described as an XML-based traversal vulnerability; several connected s...

CVE-2017-9117

In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the...

CVE-2017-9117

CVE-2017-9117 affects LibTIFF (notably 4.0.6 and possibly other versions). The issue is a heap-based buffer over-read when processing BMP images because biWidth/biHeight in the bitmap-information header are not verified against the actual input, as demonstrated in bmp2tiff. The BMP handling path ...

Updated openjpeg2 packages fix security vulnerabilities

Floating Point Exception aka FPE or divide by zero in opjpinextcprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2. CVE-2016-9112 There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image-comps0.data is not assigned a value after initializationNULL...

CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

openSUSE Security Update : openjpeg2 (openSUSE-2017-120)

This update for openjpeg2 fixes the following issues : - CVE-2016-9572 CVE-2016-9573: Insuficient check in imagetopnm could lead to heap buffer overflow bsc1014543 - CVE-2016-9580, CVE-2016-9581: Possible Heap buffer overflow via integer overflow and infite loop bsc1014975 - CVE-2016-7445: NULL...

openSUSE Security Update : openjpeg2 (openSUSE-2017-101)

This update for openjpeg2 fixes the following issues : - CVE-2016-9114: NULL pointer Access in function imagetopnm of convert.c:1943jp2 could lead to crash bsc1007740 - CVE-2016-9115: Heap Buffer Overflow in function imagetotga of convert.cjp2 bsc1007741 - CVE-2016-9580, CVE-2016-9581: Possible...

SUSE-SU-2016:3270-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: CVE-2016-9114: NULL Pointer Access in function imagetopnm of convert.c:1943jp2 could lead to crash bsc1007740 CVE-2016-9115: Heap Buffer Overflow in function imagetotga of convert.cjp2 bsc1007741 CVE-2016-9580, CVE-2016-9581: Possible Heap...

CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

CVE-2016-9117

OpenJPEG 2.1.2 contains a NULL Pointer Access vulnerability in imagetopnm (convert.c, jp2) at line 1289 that could lead to Denial of Service when processing crafted j2k files. The issue is among a set of CVEs disclosed for OpenJPEG, including several NULL pointer dereferences and heap-related ove...

CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

MantisBT 1.2.x < 1.2.18 Multiple Vulnerabilities

According to its version number, the MantisBT application hosted on the remote web server is 1.2.x prior to 1.2.18. It is, therefore, affected by the following vulnerabilities : - Multiple input-validation errors exist that could allow cross-site scripting attacks. CVE-2014-7146, CVE-2014-8986,...