6790 matches found
CVE-2020-24427
Acrobat Reader versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by an input validation vulnerability when decoding a crafted codec that could result in the disclosure of sensitive memory. An attacker could leverage this vulnerability to...
Fedora 31 : 1:java-11-openjdk (2020-421f817e5f)
New in release OpenJDK 11.0.9 2020-10-20: =========================================== Full versions of these release notes can be found at : - https://bitly.com/openjdk1109 - https://builds.shipilev.net/backports-monitor/release-notes-11.0.9.txt Security fixes - JDK-8233624: Enhance JNI linkage -...
openSUSE Security Update : spice (openSUSE-2020-1802)
This update for spice fixes the following issues : - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks ...
Debian DLA-2428-1 : spice-gtk security update
Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system. Both the SPICE client spice-gtk and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that, when processed...
[SECURITY] [DLA 2428-1] spice-gtk security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2428-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 01, 2020 https://wiki.debian.org/LTS -...
OPENSUSE-SU-2020:1803-1 Security update for spice-gtk
This update for spice-gtk fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project...
OPENSUSE-SU-2020:1802-1 Security update for spice
This update for spice fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project...
Security update for spice (moderate)
openSUSE Security Update: Security update for spice Announcement ID: openSUSE-SU-2020:1802-1 Rating: moderate References: 1177158 Cross-References: CVE-2020-14355 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for spice fixe...
Security update for spice-gtk (moderate)
openSUSE Security Update: Security update for spice-gtk Announcement ID: openSUSE-SU-2020:1803-1 Rating: moderate References: 1177158 Cross-References: CVE-2020-14355 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-2248)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2020-2248)
According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image...
SUSE-SU-2020:3085-1 Security update for spice-gtk
This update for spice-gtk fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158...
SUSE-SU-2020:3084-1 Security update for spice
This update for spice fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158...
SUSE-SU-2020:3071-1 Security update for spice-gtk
This update for spice-gtk fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158...
SUSE-SU-2020:3070-1 Security update for spice
This update for spice fixes the following issues: - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158...
Important: spice-gtk
Issue Overview: Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system. Both the SPICE client spice-gtk and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that...
Important: spice
Issue Overview: Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system. Both the SPICE client spice-gtk and server are affected by these flaws. These flaws allow a malicious client or server to send specially crafted messages that...
Medium: python-pillow
Issue Overview: An out-of-bounds read was discovered in python-pillow in the way it decodes FLI images. An application that uses python-pillow to load untrusted images may be vulnerable to this flaw, which can allow an attacker to read the memory of the application they should be not allowed to...
openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::WelsDecodeMbCabacISliceBaseMode0
Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5659753998712832 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...
