SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2019:2429-1)

This update for expat fixes the following issues : Security issues fixed : CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2019:2440-1)

This update for expat fixes the following issues : Security issue fixed : CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2019:2440-1 Security update for expat

This update for expat fixes the following issues: Security issue fixed: - CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429...

SUSE-SU-2019:2429-1 Security update for expat

This update for expat fixes the following issues: Security issues fixed: - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429...

exiv2 security update

CentOS Errata and Security Advisory CESA-2019:2101 An update for exiv2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

FreeBSD : bro -- invalid memory access or heap buffer over-read (55571619-454e-4769-b1e5-28354659e152)

Jon Siwek of Corelight reports : This is a security patch release to address a potential Denial of Service vulnerability : - The NTLM analyzer did not properly handle AV Pair sequences that were either empty or unterminated, resulting in invalid memory access or heap buffer over-read. The NTLM...

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

EulerOS 2.0 SP2 : libarchive (EulerOS-SA-2019-1849)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libarchive 3.3.2 allows remote attackers to cause a denial of service xmldata heap-based buffer over-read and application crash via a crafted...

EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2019-1955)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial ...

CVE-2018-21016

audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

Heap overflow

audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2018-21016

audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2018-21016

CVE-2018-21016 affects GPAC 0.7.1; audio_sample_entry_AddBox() in isomedia/box_code_base.c allows a crafted file to trigger a heap-based buffer over-read, causing denial of service (application crash). Public docs confirm GPAC vulnerability details and downstream advisories (Debian DLA-2072-1 / M...

CVE-2018-21016

Removed by vendor...

CVE-2018-21016

audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

EulerOS 2.0 SP5 : poppler (EulerOS-SA-2019-1898)

According to the version of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function.CVE-2019-9631 Note that Tenable Network...

CVE-2018-21016: Out-of-bounds Read

audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

EulerOS 2.0 SP5 : SDL (EulerOS-SA-2019-1883)

According to the versions of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.CVE-2019-7572 - SDL...

EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2019-1889)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick before 7.0.8-50 has a 'use of uninitialized value' vulnerability in the function ReadCUTImage in coders/cut.c.CVE-2019-13135 -...

MGASA-2019-0276 Updated poppler packages fix security vulnerabilities

The updated packages fix security vulnerabilities: The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an...