13946 matches found
CVE-2019-8355
CVE-2019-8355 affects SoX 14.4.2. The issue is an integer overflow in xmalloc.h’s multiplication fed into the lsx_valloc macro, causing a buffer allocated smaller than expected and a heap-based buffer overflow in channels_start (remix.c). This can lead to a crash or potential memory corruption as...
CVE-2019-8355
An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...
CVE-2019-8354
SoX 14.4.2 is affected by CVE-2019-8354 due to an integer overflow in lsx_make_lpf (effect_i_dsp.c) that leads to a heap-based buffer overflow when allocating memory. ENISA OSV entries and Mageia/Ubuntu/Nessus advisories corroborate the issue and list it alongside other SoX CVEs (e.g., 2019-8355,...
CVE-2019-8355
An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...
CVE-2019-8354
An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...
CVE-2019-8354
An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...
CVE-2019-8355
An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...
CVE-2019-8354
An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...
CVE-2019-8355
An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...
SUSE SLES11 Security Update : php53 (SUSE-SU-2019:13961-1)
This update for php53 fixes the following issues : Security issues fixed : CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123354. CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. Note that Tenable Networ...
CVE-2019-6539
Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC...
SUSE SLES12 Security Update : php7 (SUSE-SU-2019:0333-1)
This update for php7 fixes the following issues : Security issue fixed : CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123354. CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. CVE-2018-19935: Fixed a...
[ASA-201902-5] rdesktop: multiple issues
Arch Linux Security Advisory ASA-201902-5 ========================================= Severity: High Date : 2019-02-11 CVE-ID : CVE-2018-8791 CVE-2018-8792 CVE-2018-8793 CVE-2018-8794 CVE-2018-8795 CVE-2018-8796 CVE-2018-8797 CVE-2018-8798 CVE-2018-8799 CVE-2018-8800 CVE-2018-20174 CVE-2018-20175...
Heap overflow
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c...
CVE-2019-7637
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c...
CVE-2019-7637
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c...
CVE-2019-7637
CVE-2019-7637: SDL_FillRect in video/SDL_surface.c suffers a heap-based buffer overflow. Affected: SDL 1.2.x up to 1.2.15 and SDL 2.x up to 2.0.9. Impact, as described in multiple advisories, includes potential arbitrary code execution when processing crafted image/video/audio inputs. Connected a...
CVE-2019-7637
SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c...
Amazon Linux AMI : curl (ALAS-2019-1151)
setfilemetadata in xattr.c in GNU Wget stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribute, as...