11325 matches found
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in PHP (CVE-2019-6977) (CVE-2019-6978)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in PHP Vulnerability Details CVEID: CVE-2019-6978 DESCRIPTION: The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP ...
Amazon Linux 2 : nss-softokn (ALAS-2020-1379)
The version of nss-softokn installed on the remote host is prior to 3.44.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1379 advisory. Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized befor...
openSUSE: Security Advisory for lz4 (openSUSE-SU-2019:2399-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[ASA-202001-2] file: arbitrary code execution
Arch Linux Security Advisory ASA-202001-2 ========================================= Severity: High Date : 2020-01-09 CVE-ID : CVE-2019-18218 Package : file Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1083 Summary ======= The package file before version...
SUSE SLED15 / SLES15 Security Update : virglrenderer (SUSE-SU-2020:0017-1)
This update for virglrenderer fixes the following issues : CVE-2019-18388: Fixed a NULL pointer dereference which could have led to denial of service bsc1159479. CVE-2019-18390: Fixed an out of bound read which could have led to denial of service bsc1159478. CVE-2019-18389: Fixed a heap buffer...
CVE-2019-14906
A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow flaw while copying an existing surface into a new optimized...
Heap overflow
A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow flaw while copying an existing surface into a new optimized...
USN-4227-1: Linux kernel vulnerabilities
It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14895, CVE-2019-14901 It was discovered that a...
Debian DLA-2058-1 : nss security update
It was found that certain cryptographic primitives in nss, the Network Security Service libraries, did not check the length of the input text. This could result in a potential heap-based buffer overflow. For Debian 8 'Jessie', this problem has been fixed in version 2:3.26-1+debu8u10. We recommend...
[SECURITY] [DLA 2058-1] nss security update
Package : nss Version : 2:3.26-1+debu8u10 CVE ID : CVE-2019-17006 It was found that certain cryptographic primitives in nss, the Network Security Service libraries, did not check the length of the input text. This could result in a potential heap-based buffer overflow. For Debian 8 "Jessie", this...
CVE-2018-20671
loadspecificdebugsection in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size...
CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
CVE-2020-5496
FontForge 20190801 is affected by a heap-based buffer overflow in Type2NotDefSplines() (splinesave.c) linked to CVE-2020-5496. Connected advisories confirm the issue across multiple distros, e.g., openSUSE openSUSE-2020:89, Debian DLA-3754-1, SUSE-SU-2020:0118-1, Mageia MGASA-2020-0057, and Gento...
CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
CVE-2020-5496
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines function in splinesave.c...
CVE-2013-3941
Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...
CVE-2013-3939
XnView vulnerability CVE-2013-3939: Multiple connected sources confirm a heap-based buffer overflow in XnView’s RGB handling, caused by improper processing of RLE strip lengths. The issue exists in xnview.exe prior to version 2.13 (and cited variants reference older versions, e.g., 2.04), enablin...
EulerOS 2.0 SP8 : binutils (EulerOS-SA-2020-1001)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - loadspecificdebugsection in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based...