CVE-2018-12248

The CVE-2018-12248 entry concerns mruby 1.4.1, where a heap-based buffer over-read occurs in the OP_ENTER path when fiber is invoked with many arguments. The underlying cause is that mrbgems/mruby-fiber/src/fiber.c does not extend the stack sufficiently for large argument lists. Affects mruby 1.4...

Amazon Linux 2 : curl (ALAS-2018-1029)

Curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command...

Heap overflow

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

CVE-2018-12092

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

CVE-2018-12092

CVE-2018-12092 affects tinyexr 0.9.5, with a heap-based buffer over-read in tinyexr::DecodePixelData (tinyexr.h). Publicly reported descriptions in CNVD-2018-14428 and NVD confirm a buffer over-read related to OpenEXR code. The CNVD entry explicitly describes a vulnerability in tinyexr 0.9.5 and ...

CVE-2018-12092

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

Security update for curl (moderate)

This update for curl to version 7.60.0 fixes the following issues: These security issues were fixed: - CVE-2018-1000300: Prevent heap-based buffer overflow when closing down an FTP connection with very long server command replies bsc1092094. - CVE-2018-1000301: Prevent buffer over-read that could...

CVE-2018-12064

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...

Heap overflow

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...

CVE-2018-12064

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...

CVE-2018-12064

CVE-2018-12064 affects the tinyexr library, specifically version 0.9.5. The vulnerability is a heap-based buffer over-read in the function tinyexr::ReadChannelInfo (in tinyexr.h), due to improper bounds handling. Affected impact indicates potential exposure of memory contents (out-of-bounds read)...

SUSE-SU-2018:1601-1 Security update for memcached

This update fixes the following issues: - CVE-2016-8705: Server update remote code execution bsc1007870. - CVE-2017-9951: Heap-based buffer over-read in tryreadcommand function incomplete fix for CVE-2016-8705 bsc1056865...

Denial Of Service (DoS)

libjasper.so is vulnerableto denial of service DoS. The vulnerability exists because an attacker can send a malicious file to the jasimageishomosamp function in libjasper/base/jasimage.c, leading to heap-based buffer over-read and crash the application...

Important: curl

Issue Overview: Curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command...

CVE-2018-3562

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-3562

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

[SECURITY] [DSA 4218-1] memcached security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4218-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2018 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4218-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

freexl is susceptible to denial of serviceDoS. The attack can launched by sending a malicious file to destroycell function, leading to heap-based buffer over-read...

CVE-2018-3569

A buffer over-read can occur during a fast initial link setup FILS connection in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...