OPENSUSE-SU-2021:1651-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833...

UVI-2021-1001120 net: qed: Fix memcpy() overflow of qed_dcbx_params()

net: qed: Fix memcpy overflow of qeddcbxparams This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.129 by commit...

The vulnerability of the SubstituteString() function in the MagickCore/string.c component of the ImageMagick console graphics editor allows a malicious actor to cause a service failure by exploiting integer overflow.

The vulnerability of the SubstituteString function in the MagickCore/string.c component of the ImageMagick console graphics editor is related to the lack of checking for the replaceextent parameter when it takes a zero value. Exploiting this vulnerability allows an attacker to cause a service...

Advisory ROSA-SA-2021-1917

Software: memcached 1.4.15 OS: Cobalt 7.9 CVE-ID: CVE-2017-9951 CVE-Crit: HIGH CVE-DESC: The tryreadcommand function in memcached.c in memcached prior to version 1.4.39 allows remote attackers to cause a denial of service segmentation error with an add / set key request, which allows to compare...

Advisory ROSA-SA-2021-1891

Software: libsolv 0.6.34 OS: Cobalt 7.9 CVE-ID: CVE-2019-20387 CVE-Crit: HIGH CVE-DESC: repodataschema2id in repodata.c in libsolv before version 0.7.6 has an excessive heap-based buffer read due to the last schema being less than the length of the input schema. CVE-STATUS: default CVE-REV: defau...

CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

CVE-2021-36089

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...

CVE-2021-34382

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tzmapsharedmem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel...

Weidmueller Industrial WLAN devices remote code execution vulnerability

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A remote code execution vulnerability exists in Weidmueller Industrial WLAN devices, which stems from a specially crafted username entry that could lead to an error message buffer overflow that could be exploited...

IBM Security Sevret Server Buffer Overflow Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. IBM Security Secret Server suffers from a buffer overflow vulnerability tha...

Updated openjpeg2 packages fix a security vulnerability

A heap-based buffer overflow was found in openjpeg. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg CVE-2021-3575...

Daniel Kamil Kozar tsMuxer buffer overflow vulnerability (CNVD-2021-49065)

tsMuxer is a transport stream multiplexing and TS encapsulation tool. A buffer overflow vulnerability exists in tsMuxer version 2.6.16. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46712)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46711)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Zephyr Buffer Overflow Vulnerability

Zephyr is an open source, small, scalable real-time operating system. A security vulnerability exists in Zephyr versions = v1.14.2 and = v2.2.0 that stems from incorrect input frame validation in ieee802154 processing. No detailed vulnerability details are currently available...

Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46709)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44275)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44276)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

SUSE-SU-2021:14749-1 Security update for apache2

This update for apache2 fixes the following issues: - fixed CVE-2021-30641 bsc1187174: MergeSlashes regression - fixed CVE-2020-35452 bsc1186922: Single zero byte stack overflow in modauthdigest...

D-Link DIR-2640-US Buffer Overflow Vulnerability

The D-Link DIR-2640-US is a smart AC2600 high power Wi-Fi Gigabit router. A buffer overflow vulnerability exists in the D-Link DIR-2640-US version 1.01B04. An attacker can exploit this vulnerability by overriding a global variable in a .bss segment to cause a process crash or change...