13448 matches found
CVE-2020-19751
CVE-2020-19751 affects the multimedia framework gpac, specifically version 0.8.0, where the function gf_odf_del_ipmp_tool in odf_code.c is vulnerable to a heap-based buffer over-read. The linked sources consistently describe this as a heap overflow-like condition in the ODF handling path, indicat...
CVE-2020-19751
An issue was discovered in gpac 0.8.0. The gfodfdelipmptool function in odfcode.c has a heap-based buffer over-read...
CVE-2020-19751
Removed by vendor...
CVE-2020-19750
CVE-2020-19750 affects gpac 0.8.0, where the strdup function in box_code_base.c can cause a heap-based buffer over-read. The available documents confirm the vulnerable component and the root cause, but do not specify affected downstream products, versions beyond 0.8.0, exploit details, or remedia...
CVE-2020-19750
Removed by vendor...
Security update for libesmtp (important)
openSUSE Security Update: Security update for libesmtp Announcement ID: openSUSE-SU-2021:1235-1 Rating: important References: 1160462 1189097 Cross-References: CVE-2019-19977 CVSS scores: CVE-2019-19977 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-19977 SUSE: 7.1...
SUSE: Security Advisory (SUSE-SU-2021:2937-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 Security Update : libesmtp (SUSE-SU-2021:2937-1)
The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2937-1 advisory. - CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c bsc1160462. Tenable has extracted the preceding descripti...
SUSE-SU-2021:2937-1 Security update for libesmtp
This update for libesmtp fixes the following issues: - CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c bsc1160462...
OPENSUSE-SU-2021:2937-1 Security update for libesmtp
This update for libesmtp fixes the following issues: - CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c bsc1160462...
SUSE: Security Advisory (SUSE-SU-2021:2917-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2021:2917-1 Security update for libesmtp
This update for libesmtp fixes the following issues: - CVE-2019-19977: Fix stack-based buffer over-read in ntlm/ntlmstruct.c bsc1160462...
SUSE SLES11 Security Update : libesmtp (SUSE-SU-2021:14793-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:14793-1 advisory. - CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c bsc1160462. Tenable has extracted the preceding description block directly...
SUSE: Security Advisory (SUSE-SU-2021:14793-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-18771
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...
Debian DLA-2748-1 : tnef - LTS security update
The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2748 advisory. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef...
CVE-2020-18775
In Libav 12.3, there is a heap-based buffer over-read in vc1decodebmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...
CVE-2020-18775
In Libav 12.3, there is a heap-based buffer over-read in vc1decodebmbintfi in vc1block.c that allows an attacker to cause denial-of-service via a crafted file...