13553 matches found
EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-1608)
According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sfwriteint in sndfile.c, which will lead to...
MGASA-2020-0234 Updated sleuthkit packages fix security vulnerability
Updated sleuthkit packages fix security vulnerabilities: An issue was discovered in The Sleuth Kit TSK 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table CVE-2019-14532. In version 4.8.0 and earlier of The Sleuth Kit TSK, there ...
OPENSUSE-SU-2020:0721-1 Security update for memcached
This update for memcached fixes the following issues: Security issue fixed: - CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. - CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110. This update was imported from the SUSE:SLE-15:Update update project...
Security update for memcached (moderate)
openSUSE Security Update: Security update for memcached Announcement ID: openSUSE-SU-2020:0721-1 Rating: moderate References: 1133817 1149110 Cross-References: CVE-2019-11596 CVE-2019-15026 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Descriptio...
CVE-2020-13439
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...
Heap overflow
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...
CVE-2020-13439
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...
CVE-2020-13439
CVE-2020-13439 describes a heap-based buffer over-read in the jfif_decode function of ffjpeg’s jfif.c, affecting ffjpeg up to and including 2020-02-24. Public sources consistently identify the vulnerability as a memory-read/write boundary issue in the JPEG decoding path, with impact characterized...
SUSE-SU-2020:1381-1 Security update for memcached
This update for memcached fixes the following issues: Security issue fixed: - CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. - CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110...
CVE-2020-13112
Concisely: CVE-2020-13112 affects libexif prior to 0.6.22, caused by several buffer over-reads in EXIF MakerNote handling that could lead to information disclosure and crashes. Multiple connected advisories (ALAS2-2020-1523/1393, ALAS-2020-1443, CESA/CentOS/RH advisories, Debian LTS) corroborate ...
Debian: Security Advisory (DLA-2207-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Arbitrary Code Execution
faad2 is vulnerable to arbitrary code execution. The vulnerability exists as an issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. It is a buffer over-read in psmixphase in libfaad/psdec.c...
Denial Of Service (DoS)
radare2 is vulnerable to denial of service. A heap-based buffer over-read in the regglangparsechar function in egglang.c due to lack of input length validation, allows a remote attacker to crash the application, or potentially execute arbitrary code in the system...
Arbitrary Code Execution
wavpack is vulnerable to arbitrary code execution. A heap-based buffer over-read in the ParseDsdiffHeaderConfig function in cli/dsdiff.c allows a remote attacker to execute arbitrary code on the system or cause a denial-of-service via a malicious DSDIFF file...
Denial Of Service (DoS)
libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...
Denial Of Service (DoS)
libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the i2lesarray function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file...
Arbitrary Code Execution
rsync is vulnerable to arbitrary code execution. The vulnerability exists as the receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service heap-based buffer...
Denial Of Service (DoS)
memcached is vulnerable to denial of service DoS. The vulnerability exists as the tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and...
Arbitrary Code Execution
imagemagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in MagickCore/fourier.c allows an attacker to execute code on the system due to incorrect calls to GetCacheViewVirtualPixels...