EulerOS 2.0 SP3 : ppp (EulerOS-SA-2019-2652)

According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to 'access privileged options' vi...

EulerOS 2.0 SP3 : tcpdump (EulerOS-SA-2019-2674)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. Th...

RHEL 7 : openslp (RHSA-2019:4240)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4240 advisory. OpenSLP is an open source implementation of the Service Location Protocol SLP which is an Internet Engineering Task Force IETF standards track protoc...

Heap-Based Buffer Overflow

tensorflow is vulnerable to heap-based buffer overflow. An out-of-bounds heap memory access occurs in UnsortedSegmentSum when the Index template argument is int32 and truncation from int64 to int32 can produce negative numbers. The vulnerability, however, is unlikely to be vulnerable...

Scientific Linux Security Update : openslp on SL7.x x86_64 (20191216)

Security Fixes : - openslp: Heap-based buffer overflow in ProcessSrvRqst in slpdprocess.c leading to remote code execution CVE-2019-5544 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid132085; scriptversion"1.7";...

openslp security update

1:2.0.0-8 - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: 1781701...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19795

samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

CVE-2019-19796 affects Yabasic 2.86.2, with a heap-based buffer overflow in the myformat function.c caused by a crafted BASIC source file. The connected documents consistently describe this as a heap overflow vulnerability without vendor-provided patch details in the supplied materials. The CVE e...

CVE-2019-19795

CVE-2019-19795 affects the samurai 0.7 build tool. The connected sources describe a heap-based buffer overflow in the canonpath function of util.c triggered by a crafted build file. Concrete impact details across sources indicate memory corruption (heap overflow) with the potential consequences t...

CVE-2019-19795

samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file...

Medium: file

Issue Overview: cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write.CVE-2019-18218 Affected Packages: file Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository...

Medium: file

Issue Overview: cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write. CVE-2019-18218 Affected Packages: file Issue Correction: Run yum update file or yum update --advisory...

Important: SDL

Issue Overview: A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulnerable to this flaw, which could allow a...

Medium: libidn2

Issue Overview: idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. CVE-2019-18224 GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it...

Debian DLA-2028-1 : squid3 security update

It was found that Squid, a high-performance proxy caching server for web clients, has been affected by the following security vulnerabilities. CVE-2019-12526 URN response handling in Squid suffers from a heap-based buffer overflow. When receiving data from a remote server in response to an URN...