Heap overflow

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...

CVE-2020-12248

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2020-1925)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : libvncserver (EulerOS-SA-2020-1925)

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large heigh...

EulerOS 2.0 SP5 : libvorbis (EulerOS-SA-2020-1926)

According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393 - mapping0forward in mapping0.c in...

EulerOS 2.0 SP5 : perl (EulerOS-SA-2020-1943)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Perl before 5.30.3 has an integer overflow related to mishandling of a 'PLregkindOPn == NOTHING' situation. A crafted regular expression could lea...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2020-1924)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage...

Security Bulletin: Vulnerabilities in Rsyslog affect IBM Spectrum Protect Plus (CVE-2019-17041, CVE-2019-17042)

Summary Rsyslog is vulnerable to heap-based buffer overflows which may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2019-17041 DESCRIPTION: Rsyslog is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the...

Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2020-1866)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2020-1853)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for virglrenderer (EulerOS-SA-2020-1888)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4753-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : libjpeg-turbo (EulerOS-SA-2020-1862)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image becau...

EulerOS 2.0 SP8 : gnuplot (EulerOS-SA-2020-1851)

According to the versions of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in datafile.c in Gnuplot 5.2.5. This issue allows an attacker to conduct a heap-based buffer overflow with an arbitrary...

EulerOS 2.0 SP8 : virglrenderer (EulerOS-SA-2020-1888)

According to the versions of the virglrenderer packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest...

EulerOS 2.0 SP8 : audiofile (EulerOS-SA-2020-1835)

According to the version of the audiofile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In mpruett audio files aka audio file 0.3.6 discovered a problem.When run sfconvert in Expand3To4Module: : heap-based buffer overflow happened in...

EulerOS 2.0 SP8 : LibRaw (EulerOS-SA-2020-1864)

According to the versions of the LibRaw package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - LibRaw::raw2image in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference.CVE-2018-20363 - LibRaw::copybayer in librawcxx.cpp in LibRaw...

EulerOS 2.0 SP8 : glusterfs (EulerOS-SA-2020-1850)

According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote,...

Oracle Linux 8 : container-tools:ol8 (ELSA-2020-0348)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0348 advisory. - Fix CVE-2019-10214 1734653. - addresses CVE-2019-18466 - drop upstreamed CVE-2019-10214 patch - Fix CVE-2019-10214 1734649. - rebuild because of CVE-2019-9512...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200826)

Security Fixes : - kernel: NULL pointer dereference in searchkeyring CVE-2017-2647 - kernel: heap-based buffer overflow in lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c CVE-2019-14896 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...