PT-2018-3590

Name of the Vulnerable Software and Affected Versions JasPer versions 2.0.14 Description The issue is related to a NULL pointer dereference error in the jp2 decode function, located in libjasper/jp2/jp2 dec.c, which can lead to a denial of service. This error can be exploited by a remote attacker...

PT-2018-12289

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the HDF5 library, specifically in the function H5O layout decode in H5Olayout.c. This issue is related to the HDmemcpy function. Recommendations For version...

UBUNTU-CVE-2018-13869

An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c...

DEBIAN-CVE-2018-13870

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

UBUNTU-CVE-2018-13866

An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5Faddrdecodelen in H5Fint.c...

DEBIAN-CVE-2018-13869

An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c...

PT-2018-12235

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the H5O fill old decode function in H5Ofill.c. Recommendations For version 1.8.20, consider updating to a newer version that contains a fix for this issue,...

PT-2018-12238

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer over-read issue was discovered in the HDF5 library, specifically in the H5O link decode function located in H5Olink.c. Recommendations For version 1.8.20, consider applying a patch or fix tha...

PT-2018-12240

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description A heap-based buffer overflow issue was found in the H5G ent decode function in H5Gent.c. Recommendations For version 1.8.20, consider applying a patch or fix to address the heap-based buffer overflow in the H5G...

PT-2018-12236

Name of the Vulnerable Software and Affected Versions HDF5 version 1.8.20 Description An issue was discovered in the HDF5 library, where there is a memcpy parameter overlap in the function H5O link decode in H5Olink.c. Recommendations For version 1.8.20, consider updating to a newer version that...

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

Ffmpeg 'ff_mpeg4_decode_picture_header' Null Pointer Dereference Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpeg4decodepictureheader' function in the libavcodec/mpeg4videodec.c file in FFmpeg version 4.0.1, which is caused by the program failing to check...

PT-2018-3610

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 4.6.1 Description The issue is related to the mpatch decode function in Mercurial, which mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data,...

PT-2018-4003

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.0.1 Description The issue is related to the ff mpeg4 decode picture header function in the libavcodec/mpeg4videodec.c component of the FFmpeg multimedia library. It is caused by a missing check of a profile value...

CVE-2018-1000531

The vulnerability CVE-2018-1000531 affects inversoft prime-jwt prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba, where JWTDecoder.decode can mishandle signature verification (CWE-20). An attacker can craft a JWT with a valid header using the none algorithm and a body that passes validatio...

UBUNTU-CVE-2018-12687

tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h...

Magento Hackers Using Simple Evasion Trick to Reinfect Sites With Malware

Security researchers have been warning of a new trick that cybercriminals are leveraging to hide their malicious code designed to re-introduce the infection to steal confidential information from Magento based online e-commerce websites. So, if you have already cleaned up your hacked Magento...

Libmobi Denial of Service Vulnerability

Libmobi is used to process Mobipocket/Kindle MOBI e-book format document C library . A denial of service vulnerability exists in the mobidecodefontresource function in util.c in Libmobi version 0.3. A remote attacker can exploit this vulnerability via specially crafted mobi files to cause a denia...

FFmpeg 'ff_mpeg4_decode_picture_header' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffmpeg4decodepictureheader' function in the libavcodec/mpeg4videodec.c file in FFmpeg. The vulnerability can be exploited to cause a denial of servic...

PT-2018-10784

Name of the Vulnerable Software and Affected Versions Libmobi version 0.3 Description The issue allows remote attackers to cause a denial of service or possibly have other impact via a crafted mobi file. This is due to a heap-based buffer overflow in the mobi decode font resource function in...