Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: heap-based buffer overflow in processCropSelections in tools/tiffcrop.c CVE-2022-48281 For more details about the security issues, including the impact, a CVSS score,...

Medium: qpdf

Issue Overview: QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails. CVE-2021-36978 Affected Packages: qpdf Note: This advisory is applicable to Amazon Lin...

RHEL 8 : libtiff (RHSA-2023:3827)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3827 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: heap-based buffer...

Use After Free

libtiff.so is vulnerable to Use After Free. The vulnerability exists in loadImage of tools/tiffcrop.c which allows an attacker to cause heap-based use after free via a crafted TIFF image...

F5 Networks BIG-IP : Binutils vulnerability (K42059040)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K42059040 advisory. - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. I...

RHEL 9 : libtiff (RHSA-2023:3711)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3711 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: heap-base...

Oracle Linux 9 : libtiff (ELSA-2023-3711)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3711 advisory. - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799...

Moderate: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : VLC media player vulnerabilities (USN-6180-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6180-1 advisory. It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into...

Out-of-bounds Write

erofs-utils is vulnerable to Out-of-bounds Write. The vulnerability is in the 'erofsfsckdirentiter' function within 'fsck/main.c' which allows a malicious attacker to execute arbitrary code with a crafted erofs filesystem image leading to a heap-based buffer overflow...

Out-of-bounds Write

erofs-utils is vulnerable to Out-of-bounds Write. The vulnerability is in the 'erofsreadonedata' function within 'data.c' which allows a malicious attacker to execute arbitrary code with a crafted erofs filesystem image leading to a heap-based buffer overflow...

CVE-2023-3291

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC versions prior to 2.2.2 that stems from the presence of a heap-based buffer overflow vulnerability...

CVE-2023-3291 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-34474

CVE-2023-34474 is an ImageMagick vulnerability involving a heap-based buffer overflow in ReadTIM2ImageData() (coders/tim2.c). A local attacker can entice a user to open a crafted TIM file, causing an out-of-bounds read that may crash the application and lead to a denial of service. Public referen...

CVE-2023-34474

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...

Fortinet FortiOS Remote Code Execution Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

CVE-2023-3291

CVE-2023-3291 concerns the GPAC multimedia framework (gpac/gpac) with a heap-based buffer overflow in versions prior to 2.2.2. Public advisories (Debian DSA-5452-1) state these issues could lead to a denial of service or the execution of arbitrary code. Other sources reiterate the affected compon...

(0Day) Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

(0Day) Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...