Heap overflow

Tcpreplay before 4.3.1 has a heap-based buffer over-read in getl2len in common/get.c...

CVE-2018-20570

jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read...

CVE-2018-20552

CVE-2018-20552 affects Tcpreplay before 4.3.1, with a heap-based buffer over-read in packet2tree (tree.c). The issue can cause an application crash and, per multiple sources, may lead to denial of service or exposure of sensitive data. Affected users should upgrade to 4.3.1 or later (the fixed ve...

CVE-2018-20552

Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c...

CVE-2018-20552

Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c...

CVE-2018-20553

Tcpreplay vulnerability CVE-2018-20553 affects versions before 4.3.1 and is caused by a heap-based over-read in get_l2len (common/get.c). Public sources describe a heap-based issue in Tcpreplay that can crash the application and, in some advisories, potential denial of service or information expo...

MGASA-2018-0492 Updated tcpdump package fixes security vulnerability

Fixed a stack-based buffer over-read in the printprefix function CVE-2018-19519...

Updated tcpdump package fixes security vulnerability

Fixed a stack-based buffer over-read in the printprefix function CVE-2018-19519...

CVE-2018-20536

CVE-2018-20536 affects libLAS 1.8.1, involving a heap-based buffer over-read in liblas SpatialReference::GetGTIF() that can cause a denial of service. Public references in the provided documents show Fedora updates (liblas 1.8.1-5.fc31 and 1.8.1-5.fc32) addressing this and related CVEs, indicatin...

CVE-2018-20536

Removed by vendor...

EulerOS 2.0 SP2 : libgxps (EulerOS-SA-2018-1428)

According to the version of the libgxps package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - heap based buffer over read in ftfontfacehash function of gxps-fonts.c CVE-2018-10733 Note that Tenable Network Security has extracted the precedin...

[SECURITY] [DLA 1619-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u5 CVE ID : CVE-2018-20184 CVE-2018-20185 CVE-2018-20189 Debian Bug : 916752 916719 916721 Multiple vulnerabilities have been found in GraphicsMagick, the image processing system. CVE-2018-20184 The WriteTGAImage function tga.c is affected by a...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

Stack overflow

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20456

Radare2 before 3.1.1 is affected by a vulnerability in parseOperand inside libr/asm/p/asm_x86_nz.c, which can cause a denial of service (application crash via stack-based buffer over-read/overflow) when processing a crafted input file. The issue stems from the parseOperand implementation and resu...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

Heap overflow

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...