CVE-2019-20013

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode3dsolid in dwg.spec...

CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

PT-2019-16054

Name of the Vulnerable Software and Affected Versions matio version 1.5.17 Description An issue was found in the matio library where an attempted excessive memory allocation occurred in the Mat VarRead5 function in mat5.c. Recommendations For matio version 1.5.17, at the moment, there is no...

PT-2019-16043

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode SPLINE private function in dwg.spec. Recommendations For GNU LibreDWG versions...

PT-2019-16048

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.93 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the decode 3dsolid function in dwg.spec, potentially leading to issues. Recommendations For...

PT-2019-16050

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue was discovered where crafted input leads to an attempted excessive memory allocation in the dwg decode LWPOLYLINE private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92, a...

PT-2019-16047

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode HATCH private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92,...

CVE-2019-20009: Allocation of Resources Without Limits or Throttling

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeSPLINEprivate in dwg.spec...

CVE-2019-20013: Allocation of Resources Without Limits or Throttling

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode3dsolid in dwg.spec...

CVE-2019-20012: Allocation of Resources Without Limits or Throttling

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeHATCHprivate in dwg.spec...

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

Integer overflow

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

CVE-2019-19958: Incorrect Conversion between Numeric Types

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

PT-2019-16012

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.4.0 Description The issue is related to an integer signedness error in the MmsValue newOctetString function, located in the mms/iso mms/common/mms value.c file. This error can lead to an attempted excessive memory...

CVE-2019-19930: Integer Overflow or Wraparound

In libIEC61850 1.4.0, MmsValuenewOctetString in mms/isomms/common/mmsvalue.c has an integer signedness error that can lead to an attempted excessive memory allocation...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-2710)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a...

MGASA-2019-0373 Updated openexr packages fix security vulnerability

The updated packages fix a security vulnerability: Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp...

EulerOS 2.0 SP8 : elfutils (EulerOS-SA-2019-2102)

According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability...

OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

RHEL 7 : exiv2 (RHSA-2019:2101)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2101 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The...