3742 matches found
DEBIAN-CVE-2021-32760
containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access t...
UBUNTU-CVE-2021-32760
containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access t...
PT-2021-7415 · Udisks2 +7 · Udisks2 +7
Name of the Vulnerable Software and Affected Versions: udisks2 affected versions not specified Description: The issue is related to the Udisks program for querying and managing storage devices, specifically for ext2/3/4 file systems. It is caused by the default configuration to stop the machine i...
Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0 1.10.3 17.03.0 17.03.1 17.03.2 17.06.0 17.06.1 17.06.2 17.09.0 and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload aka gzip bombing.
...
ok-file-formats 缓冲区错误漏洞
ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. A security vulnerability exists in ok-file-formats which allows attackers to cause a denial of service DOS via a crafted jpeg file...
PT-2021-10932 · Unknown · Ok-File-Formats
Name of the Vulnerable Software and Affected Versions: ok-file-formats through 2020-06-26 Description: A heap-based buffer overflow issue in the ok jpg decode block progressive function at ok jpg.c:1054 allows attackers to cause a Denial of Service DOS via a crafted jpeg file. Recommendations: Fo...
EulerOS Virtualization 2.9.1 : python-pillow (EulerOS-SA-2021-2187)
According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Pillow before 8.1.1 allows attackers to cause a denial of service memory consumption because the reported size of a contain...
PT-2021-7718 · Exiv2 +6 · Exiv2 +6
Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: The issue is related to an out-of-bounds read in the Exiv2 library, which can be triggered when reading the metadata of a specially crafted image file. This could potentially allow a remote...
CVE-2021-27035
A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA or DWF files. This vulnerability in conjunction with other vulnerabilities could lead to code executio...
PT-2021-7564 · Apple · Ipados +4
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6 watchOS versions prior to 8 tvOS versions prior to 15 iOS versions prior to 14.8 and 15 iPadOS versions prior to 14.8 and 15 Description: A memory corruption issue was addressed with improved input validation...
FreeBSD : Exiv2 -- Multiple vulnerabilities (d49f86ab-d9c7-11eb-a200-00155d01f201)
Exiv2 teams reports : Multiple vulnerabilities covering buffer overflows, out-of-bounds, read of uninitialized memory and denial of serivce. The heap overflow is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to...
Advisory ROSA-SA-2021-1928
Software: netpbm 10.79.00 OS: Cobalt 7.9 CVE-ID: CVE-2018-8975 CVE-Crit: MEDIUM CVE-DESC: The pmmallocarray2 function in lib / util / mallocvar.c in Netpbm before version 10.81.03 allows remote attackers to cause a denial of service excessive heap-based buffer reads via a crafted image file, as...
Advisory ROSA-SA-2021-1896
Software: libtiff 4.0.3 OS: Cobalt 7.9 CVE-ID: CVE-2016-3620 CVE-Crit: HIGH CVE-DESC: The ZIPEncode function in tifzip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" parameter is used, allows remote attackers to cause a denial of service buffer overflow via a generated BMP...
The vulnerabilities of the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the console image editor ImageMagick components, related to the lack of data validation, allow attackers to trigger service interruptions.
The vulnerability of the functions ReadDCMImage, ReadPWPImage, ReadCALSImage, and ReadPICTImage in the ImageMagick console graphic editor’s code components coders/dcm.c, coders/pwp.c, coders/cals.c, and coders/p Pict.c is related to the lack of data validation during function execution. Exploitin...
The vulnerability of the IdentifyImage function in the MagickCore/identify.c component of the console image editing tool ImageMagick, related to the assignment of a null pointer, allows a malicious user to trigger a service denial.
The vulnerability of the IdentifyImage function in the MagickCore/identify.c component of the ImageMagick console-based graphics editor involves the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created image file...
The vulnerability of the DrawGetStrokeDashArray function in the wand/drawing-wand.c component of the ImageMagick console graphics editor allows a attacker to cause a service failure by manipulating the zero pointer.
The vulnerability of the DrawGetStrokeDashArray function in the wand/drawing-wand.c component of the ImageMagick console graphics editor is related to the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created image file...
CVE-2021-29464
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An...
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-1979)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[ASA-202106-54] exiv2: multiple issues
Arch Linux Security Advisory ASA-202106-54 ========================================== Severity: Low Date : 2021-06-22 CVE-ID : CVE-2021-3482 CVE-2021-29457 CVE-2021-29458 CVE-2021-29463 CVE-2021-29464 CVE-2021-29470 CVE-2021-29473 CVE-2021-29623 CVE-2021-32617 Package : exiv2 Type : multiple issu...
