Fedora Update for php-phpmyadmin-sql-parser FEDORA-2019-33649e2e64

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: php-phpmyadmin-sql-parser-4.3.2-1.fc29

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

[SECURITY] Fedora 30 Update: php-phpmyadmin-sql-parser-4.3.2-1.fc30

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

[SECURITY] Fedora 30 Update: php-twig-1.38.2-2.fc30

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

[SECURITY] Fedora 28 Update: php-twig2-2.7.2-1.fc28

The flexible, fast, and secure template engine for PHP. Fast: Twig compiles templates down to plain optimized PHP code. The overhead compared to regular PHP code was reduced to the very minimum. Secure: Twig has a sandbox mode to evaluate untrusted template code. This allows Twig to be used as a...

Contiki-NG buffer overflow vulnerability (CNVD-2019-09780)

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. A stack buffer overflow vulnerability exists in nextstring in os/storage/antelope/aql-lexer.c in Contiki-NG 4.1 and earlier versions when parsing AQL, which can be exploited by an attacker to execute cod...

CVE-2018-16666

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...

CVE-2018-16666

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...

CVE-2018-16666

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in nextstring in os/storage/antelope/aql-lexer.c while parsing AQL parsing next string...

libConfuse Buffer Overflow Vulnerability

libConfuse is a configuration file parser library written in C. It can be used for a variety of purposes. An out-of-bounds read vulnerability exists in the trimwhitespace of the lexer.l file in libConfuse version 3.2.1. A remote attacker can exploit this vulnerability to cause a denial of service...

ALPINE-CVE-2018-14447

trimwhitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read...

poppler/pdf_fuzzer: Heap-buffer-overflow in BaseMemStream<char const>::getChar

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5637450738171904 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzerasanpoppler Platform Id: linux Crash Type: Heap-buffer-overflow...

poppler/pdf_fuzzer: Heap-buffer-overflow in BaseMemStream<char const>::getChar

Project: https://anongit.freedesktop.org/git/poppler/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=4743117927350272 Project: poppler Fuzzer: aflpopplerpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanpoppler Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

CVE-2017-1000172

Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravitylexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free conditio...

CVE-2017-1000172

Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravitylexer.c. 'lexer' is being used to access a variable but 'lexer' has already been freed, creating a Heap Use-After-Free conditio...

llvm: Stack-buffer-overflow in clang::Lexer::SkipLineComment

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6418539432902656 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

UBUNTU-CVE-2017-11341

There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack...

JerryScript Denial of Service Vulnerability

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in the 'lexerprocesscharliteral' function in the jerry-core/parser/js/js-lexer.c file in JerryScript version 1.0, which stems from the failure of a program to properly allocate memory. An attacker can exploit this...

UBUNTU-CVE-2016-10210

libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted rule that is mishandled in the yygetnextbuffer function...

DEBIAN-CVE-2016-10210

libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted rule that is mishandled in the yygetnextbuffer function...