EulerOS Virtualization for ARM 64 3.0.6.0 : freetype (EulerOS-SA-2020-2025)

According to the versions of the freetype package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The RaggedCountSparseOutput implementation does not validate that the input arguments form a valid ragged tensor, allowing an attacker to exploit the vulnerability to cause an application crash via a segmentation fault from a heap-based buffer overfl...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2020-2145)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage...

EulerOS 2.0 SP3 : giflib (EulerOS-SA-2020-2148)

According to the version of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The DGifDecompressLine function in dgiflib.c in GIFLIB possibly version 3.0.x, as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer...

EulerOS 2.0 SP3 : audiofile (EulerOS-SA-2020-2098)

According to the versions of the audiofile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an...

EulerOS 2.0 SP3 : libplist (EulerOS-SA-2020-2125)

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation...

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2020-2094)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in...

EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2020-2080)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have...

EulerOS 2.0 SP3 : libvorbis (EulerOS-SA-2020-2107)

According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a...

EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2020-2126)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input...

Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members.

...

Information Disclosure

graphicsmagick is vulnerablet o information disclosure. The DescribeImage function of the magick/describe.c file contains a heap-based buffer over-read bug...

Buffer Overflow

GraphicsMagick has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A heap-based buffer overflow in the loadspecificdebugsection function in objdump.c allows an attacker to exploit the vulnerability via a malicious section size and crash the application...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exists as a heap-based buffer over-read could occur through the handlegnuhash function in readelf.c with an ELF file...

Denial Of Service (DoS)

tnef is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read in strdup, allowing an attacker may be able to write to the victim's .ssh/authorizedkeys file through an e-mail message with a crafted winmail.dat application/ms-tnef attachment...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadRGBImage of coders/rgb.c...

Buffer Over-read

graphicsmagick:xenial is vulnerable to buffer over-read. The ReadSUNImage function in coders/sun.c has a colormap heap-based buffer over-read...

Denial Of Service (DoS)

The checksysvhash function in elflint.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

Buffer Over-read

GIMP is vulnerable to a heap-based buffer over-read. It is due to a flaw in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...