The vulnerability of the xmlParseElementDecl function in parser.c of the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the xmlParseElementDecl function in the parser.c file of the libxml2 library is related to buffer overflow in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially crafted file...

LibRaw 'rollei_load_raw()' function heap buffer overflow vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A heap buffer overflow vulnerability exists in the 'rolleiloadraw' function in the internal/dcrawcommon.cpp file in LibRaw versions prior to 0.18.9. A remote attacker can exploit this vulnerability with th...

LibRaw 'parse_minolta()' function denial of service vulnerability

LibRaw is a C++ library for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A security vulnerability exists in the 'parseminolta' function in the dcraw/dcraw.c file in LibRaw versions prior to 0.18.11. An attacker can exploit this vulnerability to cause a denial of service infinit...

GHSA-P699-3WGC-7H72 org.apache.tika:tika-parsers has an Infinite Loop vulnerability

Versions of the package org.apache.tika:tika-parsers before version 1.18 are vulnerable to Denial of Service DoS via a carefully crafted or fuzzed file that can trigger an infinite loop via the ChmParser...

SUSE-SU-2018:3191-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 -...

PT-2018-3616 · Red Hat +5 · Elfutils +6

Name of the Vulnerable Software and Affected Versions: elfutils version 0.174 Description: The issue is related to a divide-by-zero vulnerability in the arlib add symbols function in arlib.c in elfutils. This vulnerability can be exploited by remote attackers to cause a denial of service, resulti...

Microsoft JET Database Engine Remote Code Execution Vulnerability

Microsoft Windows 10, etc. are a series of operating systems released by Microsoft Corporation in the U.S. JET Database Engine is one of the underlying database engines. A remote code execution vulnerability exists in Microsoft JET Database Engine. The vulnerability can be exploited by a remote...

SUSE-SU-2018:3095-1 Security update for ImageMagick

This update for ImageMagick fixes the following security issues: - CVE-2017-11532: Prevent a memory leak vulnerability in the WriteMPCImage function in coders/mpc.c via a crafted file allowing for DoS bsc1050129 - CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function bsc1108283...

Microsoft Windows Graphics Component Information Disclosure Vulnerability (CNVD-2018-20734)

Microsoft Windows Server 2008 SP2 and others are products of Microsoft Corporation.Microsoft Windows Server 2008 SP2 is a set of operating systems used by servers.PowerPoint Viewer 2007 is a presentation handling program. Graphics Components is one of the graphics components. An information...

CVE-2018-15431

A vulnerability in the Cisco Webex Network Recording Player for Microsoft Windows and the Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerability exist because the affected software improperly validates Advanced Recording...

CVE-2018-14800

Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to a stack object, which could allow execution of code under the context of the application...

HDF5 Null Pointer Dereference Vulnerability (CNVD-2019-03443)

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A null pointer dereference vulnerability exists in the 'H5Osdspaceencode' function of the H5Osdspace.c file in HDF51.10.3 and...

DEBIAN-CVE-2018-17438

A SIGFPE signal is raised in the function H5Dselectio of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack...

PT-2018-3949 · Hdf +2 · Hdf5 +2

Name of the Vulnerable Software and Affected Versions: HDF5 versions 1.10.3 and earlier Description: The issue is related to a memory leak in the H5O dtype decode helper function in the H5Odtype.c component of the HDF5 library. This allows attackers to cause a denial of service due to memory...

PT-2018-1923 · Hdf +2 · Hdf5 +2

Name of the Vulnerable Software and Affected Versions: HDF5 versions 1.10.3 and earlier Description: A SIGFPE signal is raised in the apply filters function of h5repack filters.c due to incorrect protection against division by zero when parsing a crafted HDF file. This could allow a remote denial...

DEBIAN-CVE-2018-17359

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.31. An invalid memory access exists in bfdzalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service application crash via a crafted ELF file...

PT-2018-3951 · Hdf5 +4 · Hdf5 +4

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.10.3 Description: The issue arises from incorrect protection against division by zero in the H5D chunk set info real function of the H5Dchunk.c component in the HDF5 library. This can lead to a SIGFPE signal being raised when...

BSA-2018-708

Security Advisory ID : BSA-2018-708 Component : Ghostscript Revision : 1.0: Final Ghostscript contains an optional -dSAFER option, which is supposed to prevent unsafe PostScript operations. Multiple PostScript operations bypass the protections provided by -dSAFER, which can allow an attacker to...

DEBIAN-CVE-2018-17000

A NULL pointer dereference in the function TIFFmemcmp at tifunix.c called from TIFFWriteDirectoryTagTransferfunction in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp...

openSUSE Security Update : php5 (openSUSE-2018-998)

This update for php5 fixes the following issues : The following security issues were fixed : - CVE-2018-10360: Fixed an out-of-bounds read in the docorenote function in readelf.c in libmagic.a, which allowed remote attackers to cause a denial of service via a crafted ELF file bsc1096984 -...