CVE-2018-18764

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in a parsemqtt getu16 call. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially...

Heap overflow

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a post...

openSUSE Security Update : audiofile (openSUSE-2018-1325)

This update for audiofile fixes the following issues : - CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run could occurred when running sfconvert leading to crashes or code execution when handling untrusted soundfiles bsc1111586. This update was imported from the...

CVE-2018-18729

Affected devices are Tenda routers AC7 (V15.03.06.44_CN), AC9 (V15.03.05.19(6318)_CN), AC10 (V15.03.06.23_CN), AC15 (V15.03.05.19_CN), and AC18 (V15.03.05.19(6318)_CN). The issue is a heap-based buffer overflow in the router web server (httpd). During processing of the mac parameter for a POST re...

Security update for audiofile (moderate)

This update for audiofile fixes the following issues: - CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run could occurred when running sfconvert leading to crashes or code execution when handling untrusted soundfiles bsc1111586. This update was imported from the...

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2018:3014-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for exiv2 (openSUSE-SU-2018:1961-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for unzip (openSUSE-SU-2018:1914-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for opencv (openSUSE-SU-2018:1697-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-3199-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for tiff (openSUSE-SU-2018:3370-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 6 : chromium-browser (RHSA-2018:3004)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:3004 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 70.0.3538.67. Security Fixes:...

Security update for tiff (moderate)

This update for tiff fixes the following issues: Security issue fixed: - CVE-2018-10779: TIFFWriteScanline in tifwrite.c had a heap-based buffer over-read, as demonstrated by bmp2tiff.bsc1092480 - CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denia...

SUSE SLED12 Security Update : libraw (SUSE-SU-2018:3343-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-5800: Fixed heap-based buffer overflow in LibRaw::kodakycbcrloadraw function bsc1084691. CVE-2018-5801: Fixed NULL pointer dereference in LibRaw::unpack function bsc1084690. CVE-2018-5802: Fixed out-of-bounds rea...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:3289-1)

This update for tiff fixes the following issues : CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file. bsc1108637 CVE-2018-17101: There are two out-of-bounds write...

CVE-2018-18583

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap...

Heap overflow

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette...

CVE-2018-18582

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette...

CVE-2018-18582

CVE-2018-18582 affects LuPng (through 2017-03-10). The issue is a heap-based buffer overflow in insertByte within miniz/lupng.c during a write operation using data from a palette. Multiple sources (CNVD-2019-09763, NVD/NVD mirror, PRION) describe this as a heap overflow in LuPng’s PNG decoding/en...

CVE-2018-18581

LuPng (miniz/lupng.c) contains a heap-based buffer over-read in internalPrintf, present in LuPng up to 2017-03-10. Multiple sources (CNVD-2019-09762, NVD CVE-2018-18581 listings, CVE records, and CVELIST) describe a heap over-read in internalPrintf of LuPng’s miniz/lupng.c, with potential for arb...