Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect z/TPF

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate your code to...

libpng Memory Leak Vulnerability

libpng is a PNG reference library that can create, read and write PNG graphics files. A memory leak vulnerability exists in libpng version 1.6.37, which originates from memory leaks in the 'pngmallocwarn' function and the 'pngmallocwarn' function, and can be exploited by an attacker to to obtain...

The vulnerability of the png_image_free function in the PNG bitmap handling library libpng, which allows a hacker to cause a service failure.

The vulnerability of the pngimagefree function in the PNG bitmap handling library libpng is related to the call to the freed memory area by the destructor of pngimagefreefunction. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

Out-of-bounds

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

UBUNTU-CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9423

The CVE-2019-9423 entry concerns an out-of-bounds write in OpenCV when using libpng, caused by a missing bounds check. Impact is local privilege escalation on Android 10, with no user interaction required. Public details specify the affected product as Android 10 (Android ID A-110986616); there i...

CVE-2019-9423

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9423

Removed by vendor...

PT-2019-19635

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In OpenCV calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required...

EulerOS 2.0 SP3 : libpng (EulerOS-SA-2019-2048)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-12652 Note that Tenable Network Security has...

EulerOS 2.0 SP5 : libpng (EulerOS-SA-2019-1975)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...

EulerOS Virtualization for ARM 64 3.0.2.0 : libpng (EulerOS-SA-2019-1951)

According to the versions of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, a...

EulerOS 2.0 SP2 : libpng (EulerOS-SA-2019-1855)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-12652 Note that Tenable Network Security has...

EulerOS 2.0 SP5 : libpng (EulerOS-SA-2019-1912)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-12652 Note that Tenable Network Security has...

RHEL 6 : java-1.8.0-ibm (RHSA-2019:2737)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2737 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

Photon OS 2.0: Libpng PHSA-2019-2.0-0171

An update of the libpng package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0171. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12871...

libpng: use-after-free in png_image_free in png.c

A vulnerability was found in libpng where a use-after-free issue exists in the pngimagefree function within png.c. This vulnerability can be exploited by persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to cause a denial of service...