CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

FreeBSD : clamav -- multiple vulnerabilities (8b812395-c739-11e8-ab5b-9c5c8e75236a)

Joel Esler reports : - CVE-2018-15378 : - Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. - Reported by Secunia Research at Flexera. - Fix for a 2-byte buffer over-read bug in...

Heap overflow

An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlten10mbencode of the file plugins/dlten10mb/en10mb.c, due to inappropriate values in the function memmove. The length pktlen + ctx - l2len can be larger than source value packet +...

CVE-2018-17974

An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlten10mbencode of the file plugins/dlten10mb/en10mb.c, due to inappropriate values in the function memmove. The length pktlen + ctx - l2len can be larger than source value packet +...

CVE-2018-17974

An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlten10mbencode of the file plugins/dlten10mb/en10mb.c, due to inappropriate values in the function memmove. The length pktlen + ctx - l2len can be larger than source value packet +...

CVE-2018-17974

CVE-2018-17974 is a heap-based buffer over-read in Tcpreplay 4.3.0 beta1, caused by improper length checks in dlt_en10mb_encode() (memmove) leading to potential Denial of Service. Affected product: Tcpreplay (binary components including dlt_en10mb/en10mb.c, send_packets.c, tcpreplay-edit, tcpbrid...

clamav -- multiple vulnerabilities

Joel Esler reports: CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking feature that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. Reported by Secunia Research at Flexera. Fix for a 2-byte buffer over-read bug in ClamAV&s PDF...

SUSE-SU-2018:2977-1 Security update for ImageMagick

This update for ImageMagick fixes the following security issues: - CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel function leading to DoS bsc1106989 - CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS bsc1106858. -...

Design/Logic Flaw

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device...

CVE-2018-14790

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device...

CVE-2018-14790

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device...

CVE-2018-14790

CVE-2018-14790 concerns Fuji Electric FRENIC Loader devices (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace) with firmware versions including v3.3 and v7.3.4.1a. The vulnerability is a buffer over-read in the device’s processing of FNC files, enabling remote code execution o...

CVE-2018-17854

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17854

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17427

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

CVE-2018-17427

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

CVE-2018-17854

CVE-2018-17854 concerns the SIMDComp library: versions before 0.1.1 are vulnerable to a denial-of-service via a heap-based buffer over-read caused by reading (and discarding) extra bytes. The issue stems from an incomplete fix related to CVE-2018-17427. Impact is DoS (application crash) with netw...

CVE-2018-17427

SIMDComp before 0.1.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes...

CVE-2018-17854

SIMDComp before 0.1.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash because it can read and then discard extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427...

CVE-2018-17427

SIMDComp (C library for binary packing) is affected by CVE-2018-17427. Versions before 0.1.0 allow remote attackers to cause a denial of service via a heap-based buffer over-read by reading (and then discarding) extra bytes, leading to application crashes. Public reports in CNVD/OSV/CVE records c...