CVE-2019-10899

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read...

CVE-2019-10899

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing a heap-based buffer under-read...

SUSE SLED12 / SLES12 Security Update : SDL (SUSE-SU-2019:0899-1)

This update for SDL fixes the following issues : Security issues fixed : CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. CVE-2019-7576: Fixed heap-based buffe...

EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification...

Debian: Security Advisory (DLA-1752-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1227)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...

[SECURITY] [DLA 1752-1] poppler security update

Package : poppler Version : 0.26.5-2+deb8u9 CVE ID : CVE-2019-9631 Debian Bug : A security issue was discovered in the poppler PDF rendering shared library. The Poppler shared library had a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. For Debian 8 "Jessie...

[SECURITY] [DLA 1751-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u4 CVE ID : CVE-2018-10242 CVE-2018-10243 Multiple vulnerabilities have been found in suricata, the network threat detection engine: CVE-2018-10242 Missing length check causing out-of-bounds read in SSHParseBanner app-layer-ssh.c. Remote attackers might...

CVE-2019-11008

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

CVE-2019-11006

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...

CVE-2019-11009

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file...

CVE-2019-11009

CVE-2019-11009: GraphicsMagick has a heap-based buffer over-read in ReadXWDImage (coders/xwd.c) that can cause denial of service or information disclosure when processing crafted XWD images. Affected product: GraphicsMagick 1.4 snapshot-20190322 Q8 (and related 1.3.31 references in older advisori...

CVE-2019-11008

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

CVE-2019-11008

CVE-2019-11008 affects GraphicsMagick 1.4 snapshot-20190322 Q8, with a heap-based buffer overflow in theWriteXWDImage function (coders/xwd.c). Exploitation via a crafted XWD image can cause the application to crash (denial of service) and possibly other impacts. Public advisories across multiple ...

CVE-2019-11008

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

CVE-2019-11007

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by a heap-based buffer over-read in the ReadMNGImage function (coders/png.c), enabling denial of service or information disclosure via image colormaps. Public disclosures and multiple advisories link CVE-2019-11007 to this issue. Impact details ...

CVE-2019-11006

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by CVE-2019-11006 due to a heap-based buffer over-read in ReadMIFFImage (coders/miff.c). This can cause denial of service or information disclosure via crafted MIFF content, with CVSSv3 details indicating Critical impact (HIGH confidentiality/av...

Updated advancecomp packages fix security vulnerability

advancecomp has been updated to fix a security issue that could be triggered when pressented with a malformed PNG file. advancecomp contained an integer overflow upon encountering an invalid PNG size, which could result in a buffer overflow CVE-2019-9210, as well as a heap-based buffer over-read...

MGASA-2019-0128 Updated advancecomp packages fix security vulnerability

advancecomp has been updated to fix a security issue that could be triggered when pressented with a malformed PNG file. advancecomp contained an integer overflow upon encountering an invalid PNG size, which could result in a buffer overflow CVE-2019-9210, as well as a heap-based buffer over-read...

Updated libjpeg packages fix security vulnerability

get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...