CVE-2018-17197

A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika...

MGASA-2019-0001 Updated pache-commons-compress packages fix security vulnerabilities

A flaw was found in Apache Commons Compress versions 1.11 to 1.15. A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount ...

Denial Of Service (DoS)

libraw.so is vulnerable to denial of service. A flaw in the parserollei function in internal/dcrawcommon.cpp allows a remote attacker to cause the application to enter into an infinite loop, resulting in a denial of service condition...

DEBIAN-CVE-2019-3573

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl in the file fromsixel.c, as demonstrated by sixel2png...

UBUNTU-CVE-2019-3573

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl in the file fromsixel.c, as demonstrated by sixel2png...

CVE-2019-3573

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl in the file fromsixel.c, as demonstrated by sixel2png...

CVE-2019-3573

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl in the file fromsixel.c, as demonstrated by sixel2png...

Design/Logic Flaw

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl in the file fromsixel.c, as demonstrated by sixel2png...

CVE-2019-3573

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl in the file fromsixel.c, as demonstrated by sixel2png...

CVE-2019-3573

In libsixel v1.8.2, there is an infinite loop in the function sixeldecoderawimpl in the file fromsixel.c, as demonstrated by sixel2png...

SUSE-SU-2019:0005-1 Security update for libraw

This update for libraw fixes the following issues: Security issues fixed: The following security vulnerabilities were addressed: - CVE-2018-5813: Fixed an error within the 'parseminolta' function dcraw/dcraw.c that could be exploited to trigger an infinite loop via a specially crafted file. This...

SUSE SLES12 Security Update : php5 (SUSE-SU-2018:1291-1)

This update for php5 fixes the following issues: Security issues fixed : - CVE-2018-10545: Fix access controls in FPM child processes bsc1091367. - CVE-2018-10547: Fix Reflected XSS on the PHAR 403 and 404 error pages bsc1091362. - CVE-2018-10546: Fix an infinite loop exists in ext/iconv/iconv.c...

PT-2019-16621 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is related to an infinite loop in the sixel decode raw impl function, located in the fromsixel.c file. This has been demonstrated using sixel2png. Recommendations: For libsixel version 1.8.2,...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2018:2305-1)

This update for ffmpeg fixes the following issues: Security issues fixed : - CVE-2018-13302: Fixed out of array access issue bsc1100356. - CVE-2018-1999010: Fixed multiple out of array access vulnerabilities in the mms protocol that could result in accessing out of bound data via specially crafte...

SUSE SLES12 Security Update : php7 (SUSE-SU-2018:1176-1)

This update for php7 fixes the following issues: Security issues fixed : - CVE-2018-10545: Fix access controls in FPM child processes bsc1091367. - CVE-2018-10547: Fix Reflected XSS on the PHAR 403 and 404 error pages bsc1091362. - CVE-2018-10546: Fix an infinite loop exists in ext/iconv/iconv.c...

SUSE SLED15 / SLES15 Security Update : openssl-1_0_0 (SUSE-SU-2018:4001-1)

This update for openssl-100 fixes the following issues : Security issues fixed : CVE-2018-0734: Fixed timing vulnerability in DSA signature generation bsc1113652. CVE-2018-5407: Added elliptic curve scalar multiplication timing attack defenses that fixes 'PortSmash' bsc1113534. Non-security issue...

Artifex Software Ghostscript Denial of Service Vulnerability (CNVD-2018-26917)

Artifex Software Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. print Postscript files on...

Design/Logic Flaw

An issue was discovered in NuttX before 7.27. The function netlibparsehttpurl in apps/netutils/netlib/netlibparsehttpurl.c mishandles URLs longer than hostlen bytes in the webclient, this is set by default to 40, leading to an Infinite Loop. The attack vector is the Location header of an HTTP 3xx...

CVE-2018-20578

An issue was discovered in NuttX before 7.27. The function netlibparsehttpurl in apps/netutils/netlib/netlibparsehttpurl.c mishandles URLs longer than hostlen bytes in the webclient, this is set by default to 40, leading to an Infinite Loop. The attack vector is the Location header of an HTTP 3xx...

CVE-2018-20578

An issue was discovered in NuttX before 7.27. The function netlibparsehttpurl in apps/netutils/netlib/netlibparsehttpurl.c mishandles URLs longer than hostlen bytes in the webclient, this is set by default to 40, leading to an Infinite Loop. The attack vector is the Location header of an HTTP 3xx...