CVE-2019-20171

CVE-2019-20171 affects GPAC versions 0.5.2 and 0.9.0-development-20191109, with memory leaks identified in metx_New (isomedia/box_code_base.c) and abst_Read (isomedia/box_code_adobe.c). This vulnerability is evidenced in multiple sources (NVD entry and Debian/MAGEIA advisories) and is part of a b...

CVE-2019-20171

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3379-1)

The SUSE Linux Enterprise 12 SP 3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts ...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2693)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

MGASA-2019-0401 Updated freerdp packages fix security vulnerabilities

Updated freerdp packages fix security vulnerabilities: Multiple memory leaks in libfreerdp/codec/region.c CVE-2019-17177. Memory leak in HuffmanTreemakeFromFrequencies CVE-2019-17178...

Updated freerdp packages fix security vulnerabilities

Updated freerdp packages fix security vulnerabilities: Multiple memory leaks in libfreerdp/codec/region.c CVE-2019-17177. Memory leak in HuffmanTreemakeFromFrequencies CVE-2019-17178...

EulerOS 2.0 SP3 : jasper (EulerOS-SA-2019-2598)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in JasPer 2.0.14. There is a heap-based buffer overflow of size 1 in the function jasicctxtdescinput in...

Memory Leaks

github.com/tecbot/gorocksdb is vulnerable to memory leaks. This is because the memory allocation in the gorocksdbfilterpolicydeletefilter and gorocksdbmergeoperatordeletevalue functions of gorocksdb.c are not properly handled, leading to memory leaks and subsequently a denial of service condition...

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,and Phot...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.41.1 - x86/speculation: Determine swapgs before alternative instructions are set Patrick Colp Orabug: 30379626 - ieee802154: enforce CAPNETRAW for raw sockets Allen Pais Orabug: 30444947 CVE-2019-17053 - mISDN: enforce CAPNETRAW for raw sockets Ori Nimron Orabug: 30445159...

Unbreakable Enterprise kernel security update

2.6.39-400.317.1 - ieee802154: enforce CAPNETRAW for raw sockets Allen Pais Orabug: 30444948 CVE-2019-17053 - mISDN: enforce CAPNETRAW for raw sockets Ori Nimron Orabug: 30445161 CVE-2019-17055 - net: sit: fix memory leak in sitinitnet Mao Wenan Orabug: 30445309 CVE-2019-16994 - media: dvb: usb:...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3200-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-19081: Fixed a memory leak in the nfpflowerspawnvnicreprs could have allowed attackers to cause a denial of service bsc1157045. CVE-2019-19080: Fixed fou...

SUSE-SU-2019:3200-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19081: Fixed a memory leak in the nfpflowerspawnvnicreprs could have allowed attackers to cause a denial of service bsc1157045. - CVE-2019-19080: Fixed...

Memory Leaks

kubernetes is vulnerable to memory leaks. If an event in the queue takes a long time expire, the previous nextReadyAt timers will pile up and the memory will potentially be exhausted, resulting in an application crash...

EulerOS 2.0 SP2 : zziplib (EulerOS-SA-2019-2478)

According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The zziplib is a lightweight library to easily extract data from zip files.Security Fixes:An issue was discovered in ZZIPlib through 0.13.69...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2019-2490)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service assertion failure via...

Denial Of Service (DoS)

overthere is vulnerable to denial of service. Sessions are not closed after closing of an SMB2 connection. This could lead to memory leaks and potentially cause a crash in the application when system resources are exhausted...

openSUSE Security Update : freerdp (openSUSE-2019-2608)

This update for freerdp fixes the following issues : - CVE-2019-17177: Fixed multiple memory leaks in libfreerdp/codec/region.c bsc1153163. - CVE-2019-17178: Fixed a memory leak in HuffmanTreemakeFromFrequencies bsc1153164. This update was imported from the SUSE:SLE-15-SP1:Update update project. ...

openSUSE Security Update : freerdp (openSUSE-2019-2604)

This update for freerdp fixes the following issues : - CVE-2019-17177: Fixed multiple memory leaks in libfreerdp/codec/region.c bsc1153163. - CVE-2019-17178: Fixed a memory leak in HuffmanTreemakeFromFrequencies bsc1153164. This update was imported from the SUSE:SLE-15:Update update project...

Denial Of Service (DoS) Through Infinite Loop

css-element-queries is vulnerable to denial of service DoS attacks. If an element is added to DOM and removed from DOM very quickly even before the first reset happens, the requestAnimationFrame of reset itself will get stuck in an infinite loop leading to denial of service conditions and memory...