12491 matches found
MGASA-2019-0003 Updated libgxps packages fix security vulnerabilities
A flaw was found in libgxps through 0.3.0. There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c. A crafted input will lead to a remote denial of service attack CVE-2018-10733. An integer overflow flaw exists within the "gxpsimagescreatefrompng" function in...
Fedora 28 : curl (2018-fa01002d7e)
fix FTP shutdown response buffer overflow CVE-2018-1000300 - fix RTSP bad headers buffer over-read CVE-2018-1000301 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
CVE-2019-3574
In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...
Heap overflow
In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...
Heap overflow
An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to pngwriterow in libpng, an out-of-bounds write might occur for some memory...
CVE-2019-3572
An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to pngwriterow in libpng, an out-of-bounds write might occur for some memory...
CVE-2019-3572
An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to pngwriterow in libpng, an out-of-bounds write might occur for some memory...
CVE-2019-3574
In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...
CVE-2019-3572
An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to pngwriterow in libpng, an out-of-bounds write might occur for some memory...
CVE-2019-3572
CVE-2019-3572 affects libming 0.4.8, with a heap-based buffer over-read in the function writePNG (util/dbl2png.c) of the dbl2png utility. The issue is linked to an erroneous call to libpng's png_write_row, potentially enabling an out-of-bounds write on certain memory layouts. No exploitation deta...
CVE-2019-3574
In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...
CVE-2019-3574
CVE-2019-3574 : In libsixel v1.8.2, there is a heap-based buffer over-read in load_jpeg() (loader.c), demonstrated by img2sixel. Connected sources consistently indicate upgrades to newer libsixel versions to mitigate issues (e.g., 1.8.3+; some entries mention 1.8.4+ as a fixed release). Evidence ...
CVE-2019-3574
In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...
SUSE SLES12 Security Update : php7 (SUSE-SU-2017:2468-1)
This update for php7 fixes several issues. These security issues were fixed : - CVE-2017-12932: Prevent heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue could have...
SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2018:2230-1)
This update for clamav to version 0.100.1 fixes the following issues: The following security vulnerabilities were addressed : - CVE-2018-0360: HWP integer overflow, infinite loop vulnerability bsc1101410 - CVE-2018-0361: PDF object length check, unreasonably long time to parse relatively small fi...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2043-1)
This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...
SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2018:4131-1)
This update for tcpdump fixes the following issues : Security issues fixed : CVE-2018-19519: Fixed a stack-based buffer over-read in the printprefix function bsc1117267 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...
SUSE SLES12 Security Update : php5 (SUSE-SU-2017:2518-1)
This update for php5 fixes on issues. This security issue was fixed : - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the...
