42 matches found
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : libwmf (SSA:2018-120-01)
New libwmf packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-120-01. The text itself is copyrig...
CVE-2018-9317
CVE-2018-9313 describes a vulnerability in BMW i/X/3/5/7 series Head Unit HU_NBT (Infotainment) from 2012–2018. A remote Bluetooth attack, usable when in pairing mode, could reboot the Head Unit. Affected component: HU_NBT Infotainment; impact: head unit reboot per description. Vulnerability deta...
Slackware 14.2 / current : gd (SSA:2017-199-02)
New gd packages are available for Slackware 14.2 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-199-02. The text itself is copyright C Slackware...
[slackware-security] gd
New gd packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gd-2.2.4-i586-1slack14.2.txz: Upgraded. Fixes security issues: gdImageCreate doesn't check for oversized images and as such is prone to Do...
USN-3213-1: GD library vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker cou...
Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-3213-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3213-1 advisory. Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were...
openSUSE Security Update : gd (openSUSE-2017-289)
This update for gd fixes the following security issues : - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. bsc1022553 - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd allowed remote...
Fedora Update for libwmf FEDORA-2017-f787c35494
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2017:0468-1 Security update for gd
This update for gd fixes the following security issues: - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. bsc1022553 - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd allowed remote...
SUSE SLES11 Security Update : gd (SUSE-SU-2017:0459-1)
This update for gd fixes the following security issues : - CVE-2016-9317: The gdImageCreate function in the GD Graphics Library aka libgd allowed remote attackers to cause a denial of service system hang via an oversized image. bsc1022283 - CVE-2016-10167: A denial of service problem in...
Debian DSA-3777-1 : libgd2 - security update
Multiple vulnerabilities have been discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[SECURITY] [DSA 3777-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3777-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...
Debian DLA-804-1 : libgd2 security update
Multiple security issues have been found in the GD Graphics Library. They may lead to the execution of arbitrary code or causing application crash. CVE-2016-9317 Signed integer overflow in gdio.c CVE-2016-10167 Improper handling of issing image data can cause crash CVE-2016-10168 GD2 stores the...
CVE-2016-9317
The CVE-2016-9317 issue affects the GD Graphics Library (libgd) and specifically the gdImageCreate function. Before version 2.2.4, processing an oversized image could cause a denial of service (system hang). Public advisories and security updates reference this CVE alongside other libgd vulnerabi...
Fedora Update for gd FEDORA-2017-bab5698540
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for gd FEDORA-2017-2717b02630
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : ffmpeg -- multiple vulnerabilities (65b14d39-d01f-419c-b0b8-5df60b929973)
Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution and use in source VuXML and...
CVE-2014-9317
CVE-2014-9317 affects FFmpeg’s libavcodec/pngdec.c decode_ihdr_chunk. An IDAT before an IHDR in a PNG can trigger an out-of-bounds heap access, leading to a denial of service (and possibly other impact). Affected FFmpeg versions are 2.x up to 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4. De...