Discourse < 2.4.0.beta3 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities including CSRF flaws. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Denial Of Service (DoS)

exempi is vulnerable to denial of service DoS. The vulnerability exists through an infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp...

exiv2: SIGABRT caused by memory allocation in types.cpp:Exiv2::Internal::PngChunk::zlibUncompress()

In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call...

exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...

exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp

An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .avi file...

Exploit for CVE-2019-2525

VirtualBox 6.0.0 Exploit 1-day 사용할 VBox bug - CVE-2019-2525...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-45045 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-44469 CVE-2017-12652 affecting package libpng12 1.2.57-16

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-44973 CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

DEBIAN-CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43573 CVE-2017-12652 affecting package libpng12 1.2.57-16

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-45102 CVE-2017-12652 affecting package openjpeg2 2.3.1-12

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43468 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

CVE-2017-12652 affects libpng older than 1.6.32, where the library does not properly check the length of chunks against the user limit. This can lead to disclosure, data modification, or denial-of-service scenarios as indicated by the grouped references. Affected products are not limited to a sin...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652: Improper Input Validation

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

DEBIAN-CVE-2019-13112

A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to an std::badalloc exception via a crafted PNG image file...

CVE-2019-13112

A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to an std::badalloc exception via a crafted PNG image file...

CVE-2019-13109

An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction...