EulerOS Virtualization for ARM 64 3.0.5.0 : libsndfile (EulerOS-SA-2020-1066)

According to the versions of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of...

MGASA-2020-0030 Updated opencv packages fix security vulnerabilities

The updated packages fix security vulnerabilities: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. CVE-2019-14491 An issue was...

Updated opencv packages fix security vulnerabilities

The updated packages fix security vulnerabilities: An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. CVE-2019-14491 An issue was...

NewStart CGSL CORE 5.05 / MAIN 5.05 : elfutils Multiple Vulnerabilities (NS-SA-2019-0258)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has elfutils packages installed that are affected by multiple vulnerabilities: - dwarfgetaranges in dwarfgetaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service heap-based buffer...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libjpeg-turbo Multiple Vulnerabilities (NS-SA-2019-0227)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libjpeg-turbo packages installed that are affected by multiple vulnerabilities: - The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute...

CVE-2018-13785

In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function pngrutil.c may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service...

CVE-2019-19888

jfifdecode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error...

Code injection

jfifdecode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error...

CVE-2019-19888

jfifdecode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error...

CVE-2019-19888

CVE-2019-19888 affects the ffjpeg project (jfif_decode in jfif.c) with a divide-by-zero error present through 2019-08-21. Connected documents corroborate: FFjpeg jfif_decode divide-by-zero; recommendations for ffjpeg through 2019-08-21 include updating to a release after 2019-08-21 or temporarily...

EulerOS 2.0 SP3 : qt (EulerOS-SA-2019-2656)

According to the versions of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.CVE-2018-19872 - An issue was...

PT-2019-15988 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg through 2019-08-21 Description: The issue is related to a divide-by-zero error in the jfif decode function, located in jfif.c. This error occurs in ffjpeg. Recommendations: For ffjpeg through 2019-08-21, consider updating to a version...

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2019-2616)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The psffwrite function in fileio.c in libsndfile allows attackers to cause a denial of service divide-by-zero error and application crash via...

openSUSE Security Update : opencv (openSUSE-2019-2671)

This update for opencv fixes the following issues : Security issues fixed : - CVE-2019-14491: Fixed an out of bounds read in the function cv:predictOrdered, leading to DOS bsc1144352. - CVE-2019-14492: Fixed an out of bounds read/write in the function HaarEvaluator:OptFeature:calc, which leads to...

OPENSUSE-SU-2019:2671-1 Security update for opencv

This update for opencv fixes the following issues: Security issues fixed: - CVE-2019-14491: Fixed an out of bounds read in the function cv:predictOrdered, leading to DOS bsc1144352. - CVE-2019-14492: Fixed an out of bounds read/write in the function HaarEvaluator:OptFeature:calc, which leads to...

Security update for opencv (moderate)

openSUSE Security Update: Security update for opencv Announcement ID: openSUSE-SU-2019:2671-1 Rating: moderate References: 1144348 1144352 1149742 1154091 Cross-References: CVE-2019-14491 CVE-2019-14492 CVE-2019-15939 Affected Products: openSUSE Leap 15.1 An update that solves three vulnerabiliti...

SUSE SLED15 / SLES15 Security Update : opencv (SUSE-SU-2019:3192-1)

This update for opencv fixes the following issues : Security issues fixed : CVE-2019-14491: Fixed an out of bounds read in the function cv:predictOrdered, leading to DOS bsc1144352. CVE-2019-14492: Fixed an out of bounds read/write in the function HaarEvaluator:OptFeature:calc, which leads to...

EulerOS 2.0 SP2 : elfutils (EulerOS-SA-2019-2510)

According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Divide-by-zero vulnerabilities in the function arlibaddsymbols in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of servic...

EulerOS 2.0 SP2 : giflib (EulerOS-SA-2019-2498)

According to the versions of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgiflib.c if the heigh...

EulerOS Virtualization for ARM 64 3.0.3.0 : libpng (EulerOS-SA-2019-2331)

According to the versions of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function pngrutil.c may trigger an intege...