Huawei EulerOS: Security Advisory for netpbm (EulerOS-SA-2020-1255)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libXfont (EulerOS-SA-2020-1241)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2020-1190)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : expat (EulerOS-SA-2020-1217)

According to the versions of the expat packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox...

EulerOS Virtualization for ARM 64 3.0.2.0 : unzip (EulerOS-SA-2020-1222)

According to the versions of the unzip package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP...

EulerOS Virtualization for ARM 64 3.0.2.0 : libXfont (EulerOS-SA-2020-1241)

According to the versions of the libXfont package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open but not read files on the system as...

EulerOS Virtualization for ARM 64 3.0.2.0 : netpbm (EulerOS-SA-2020-1255)

According to the version of the netpbm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The pmmallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial ...

EulerOS Virtualization for ARM 64 3.0.2.0 : elfutils (EulerOS-SA-2020-1190)

According to the versions of the elfutils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Elfutils is a collection of utilities, including stack to show backtraces, nm for listing symbols from object files,...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2020-1217)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : libcroco (EulerOS-SA-2020-1251)

According to the versions of the libcroco package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - DISPUTED The crtknzrparsergb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an 'outside the range of...

EulerOS Virtualization for ARM 64 3.0.2.0 : ncurses (EulerOS-SA-2020-1206)

According to the versions of the ncurses packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurse...

SUSE SLED12 / SLES12 Security Update : gd (SUSE-SU-2020:0623-1)

This update for gd fixes the following issues : CVE-2017-7890: Fixed a buffer over-read into uninitialized memory bsc1050241. CVE-2018-14553: Fixed a NULL pointer dereference in gdImageClone bsc1165471. CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120. Note that...

SUSE-SU-2020:0623-1 Security update for gd

This update for gd fixes the following issues: - CVE-2017-7890: Fixed a buffer over-read into uninitialized memory bsc1050241. - CVE-2018-14553: Fixed a null pointer dereference in gdImageClone bsc1165471. - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm bsc1140120...

CVE-2020-10233

In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...

Medium: freetype

Issue Overview: FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c. CVE-2015-9381 FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation. CVE-2015-9382...

CVE-2020-10233

In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...

CVE-2020-10233

CVE-2020-10233 affects The Sleuth Kit (TSK) up to version 4.8.0, where a heap-based buffer over-read occurs in ntfs_dinode_lookup (fs/ntfs.c). Exploitation details are not provided in the available documents, but multiple sources indicate this fixed with a 4.9.0 release. Remediation: upgrade to T...

CVE-2020-10233

In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a heap-based buffer over-read in ntfsdinodelookup in fs/ntfs.c...

CVE-2019-14082

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074,...

CVE-2019-14081

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networki...