FreeBSD : Gitlab -- Multiple vulnerabilities (5d5e5cda-38e6-11eb-bbbf-001b217b3468)

Gitlab reports : XSS in Zoom Meeting URL Limited Information Disclosure in Private Profile User email exposed via GraphQL endpoint Group and project membership potentially exposed via GraphQL Search terms logged in search parameter in rails logs Un-authorised access to feature flag user list A...

Denial Of Service (DoS)

GraphicsMagick is vulnerable to denial of service attacks. Heap-based buffer overflow in ReadMNGImage in coders/png.c causes system hang...

Arbitrary Code Execution

graphicsmagick is vulnerable to Arbitrary Code Execution. The vulnerability exists as the ReadMNGImage function in coders/png.c mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This vulnerability is different from CVE-2017-11642...

Information Disclosure

graphicsmagick is vulnerablet o information disclosure. The DescribeImage function of the magick/describe.c file contains a heap-based buffer over-read bug...

Buffer Overflow

GraphicsMagick has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a NULL pointer dereference in the WritePCLImage function in coders/pcl.c during writes of monochrome images...

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference vulnerability in the function ReadCINEONImage in coders/cineon.c...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap overflow in the WriteRGBImage function in coders/rgb.c when processing multiple frames that have non-identical widths...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in the "Display visual image directory" feature of the DescribeImage function in magick/describe.c file allows an attacker to execute arbitrary code on the host OS via a malicious MIFF format file with the...

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through the length field in a header, which is passed into the ReadSUNImage function in coders/sun.c...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A NULL pointer dereference in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This is different vulnerability from CVE-2017-11638...

Buffer Over-read

graphicsmagick:xenial is vulnerable to buffer over-read. The ReadSUNImage function in coders/sun.c has a colormap heap-based buffer over-read...

Denial Of Service (DoS)

graphicsmagick:xenial is vulnerable to denial of service DoS. Off-by-one error in the DrawImage function in magick/render.c allows remote attackers to cause a denial of service DrawDashPolygon heap-based buffer over-read and application crash via a crafted file...

Buffer Over-read

GraphicsMagick is vulnerable to a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...

Denial Of Service (DoS)

GraphicsMagick is vulnerable to denial of service. A remote attacker is able to crash the application via excessive memory allocation due to an integer underflow in ReadPICTImage in coders/pict.c...

Denial Of Service (DoS)

graphicsmagick:xenial is vulnerable to denial of service DoS. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, a...

Use-after-free

graphicsmagick:xenial is vulnerable to use-after-free. The ReadMNGImage function in coders/png.c in GraphicsMagick has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in the ImportGrayQuantumType function, through ReadGRAYImage in coders/gray.c...

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service. A NULL pointer dereference in the ReadDCMImage in coders/dcm.c allows remote attackers to cause a denial of service via a malicious DICOM image...