Heap Buffer Overflow

Simple DirectMedia Layer SDL is vulnerable to heap-based buffer overflow. It is possible due to a flaw in function MSADPCMdecode in audio/SDLwave.c...

RHEL 7 : libtiff (RHSA-2020:3902)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3902 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: integer...

Moderate: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: librabbitmq security update

An update for librabbitmq is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

RHEL 7 : librabbitmq (RHSA-2020:3949)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3949 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...

EulerOS Virtualization for ARM 64 3.0.6.0 : virglrenderer (EulerOS-SA-2020-2042)

According to the versions of the virglrenderer package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0...

Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2020-2085)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2020-2040)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-2040)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : audiofile (RHSA-2020:3877)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3877 advisory. The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like...

EulerOS Virtualization for ARM 64 3.0.6.0 : freetype (EulerOS-SA-2020-2025)

According to the versions of the freetype package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The RaggedCountSparseOutput implementation does not validate that the input arguments form a valid ragged tensor, allowing an attacker to exploit the vulnerability to cause an application crash via a segmentation fault from a heap-based buffer overfl...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2020-2145)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage...

EulerOS 2.0 SP3 : audiofile (EulerOS-SA-2020-2098)

According to the versions of the audiofile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an...

EulerOS 2.0 SP3 : giflib (EulerOS-SA-2020-2148)

According to the version of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The DGifDecompressLine function in dgiflib.c in GIFLIB possibly version 3.0.x, as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer...

EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2020-2080)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have...

EulerOS 2.0 SP3 : libplist (EulerOS-SA-2020-2125)

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation...

EulerOS 2.0 SP3 : libvorbis (EulerOS-SA-2020-2107)

According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A heap-based buffer overflow in the loadspecificdebugsection function in objdump.c allows an attacker to exploit the vulnerability via a malicious section size and crash the application...

Denial Of Service (DoS)

sox:eoan is vulnerable to denial of service DoS. There is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...