823 matches found
SUSE SLED15 / SLES15 Security Update : lz4 (SUSE-SU-2019:2757-1)
This update for lz4 fixes the following issues : CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4write32 bsc1153936. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...
DEBIAN-CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
Heap overflow
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543
CVE-2019-17543 : LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize) when large inputs are fed to LZ4_compress_fast. This can lead to data corruption; vendor notes only a few uncommon API usages are at risk. For detection/remediation, upgrade to LZ4...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-17543: Out-of-bounds Write
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
lz4/compress_fuzzer: Heap-buffer-overflow in LZ4_write32
Project: https://github.com/lz4/lz4.git Detailed report: https://oss-fuzz.com/testcase?key=5726918013353984 Project: lz4 Fuzzer: afllz4compressfuzzer Fuzz target binary: compressfuzzer Job Type: aflasanlz4 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x61c00000075b...
PT-2019-6388 · Yann Collet +9 · Lz4 +8
Name of the Vulnerable Software and Affected Versions: LZ4 versions prior to 1.9.2 MySQL Server versions 5.7.34 and earlier MySQL Server versions 8.0.25 and earlier Description: The issue is related to a heap-based buffer overflow in the LZ4 compression algorithm, specifically in the LZ4 write32...
CVE-2017-7773
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
DEBIAN-CVE-2017-7773
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
CVE-2017-7773
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
Heap overflow
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...
CVE-2017-7773
CVE-2017-7773 is a Graphite2 heap-based buffer overflow in the lz4::decompress implementation (src/Decompressor) that affects Firefox prior to 54. The issue can cause a crash and, per advisories, may allow arbitrary code execution under certain conditions. Affected products are those using Graphi...