EulerOS 2.0 SP5 : python-pillow (EulerOS-SA-2020-1128)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-1094)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in dexpression1 in...

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

CVE-2015-8751

Integer overflow in the jasmatrixcreate function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation...

CVE-2015-8751

Integer overflow in the jasmatrixcreate function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation...

Integer overflow

Integer overflow in the jasmatrixcreate function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation...

CVE-2015-8751

Integer overflow in the jasmatrixcreate function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory allocation...

CVE-2015-8751

CVE-2015-8751 affects JasPer/JasPer’s jas_matrix_create function. The connected sources confirm an integer overflow in this path, triggered while processing certain JPEG 2000 images, related to memory allocation. Reported impact includes potential remote code execution or denial of service, as do...

CVE-2020-5829

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

Design/Logic Flaw

Profinet-IO PNIO stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable...

CVE-2019-13946

The CVE-2019-13946 issue affects the PROFINET-IO (PNIO) stack in Siemens devices, specifically PNIO versions prior to V06.00. The root problem is uncontrolled internal resource allocation during multiple diagnostic package requests to the DCE-RPC interface, enabling a network-accessible attacker ...

The vulnerabilities of the functions png_malloc_warn and png_create_info_struct in the PNG graphics handling library allow a attacker to cause a service failure.

The vulnerability of the pngmallocwarn and pngcreateinfostruct functions in the PNG graphics library used by libpng is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2020-7226

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

Denial Of Service (DoS)

cryptacular is vulnerable to denial of service. Failure to validate the nonce array length associated with new byte allows an attacker to cause excessive memory allocation on the system during a decode operation, potentially resulting in an application crash...

CVE-2019-14060

Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due to lack of check of return value for read or write blob in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2019-14046

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...

Code injection

Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due to lack of check of return value for read or write blob in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Integer overflow

Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow in Snapdragon Industrial IOT in MDM9206, MDM9607...

Input validation

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...

CVE-2019-14060

CVE-2019-14060 is a vulnerability described as uninitialized stack data usage when memory for a blob is not allocated or is smaller than the required struct, caused by a missing check of the return value for read/write blob operations in Qualcomm Snapdragon components (Android/Snapdragon Auto, Co...