Security update for tiff (moderate)

openSUSE Security Update: Security update for tiff Announcement ID: openSUSE-SU-2020:1561-1 Rating: moderate References: 1146608 Cross-References: CVE-2019-14973 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for tiff fixes...

Heap Overflow Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61112)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A heap overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server...

SUSE-SU-2020:2744-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608...

CVE-2020-14363

An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to cause an application compiled with libX11 to crash, or in some cases, result in arbitrary code execution. The highest threat from this flaw is to confidentiality,...

mkethToken Number Error Vulnerability

mkethToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of mkethToken. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

JerryScript ecma_is_lexical_environment buffer overflow vulnerability

JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryScript ecmaislexicalenvironment has a buffer overflow vulnerability that can be exploited by attackers to submit special requests that can crash an application or execute arbitrary code...

The vulnerability of the `vhost_user_set_log_base` function in libraries and drivers for fast packet processing in DPDK allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the vhostusersetlogbase function in libraries and drivers for fast packet processing in DPDK lies in a potential integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the client API library for X Window System libX11, caused by a numerical overflow, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the client API library for the X Window System libX11 is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2020-16290

A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

SUSE SLED15 / SLES15 Security Update : xrdp (SUSE-SU-2020:2142-1)

This update for xrdp fixes the following issues : Update to version 0.9.13.1 + This is a security fix release that includes fixes for the following local buffer overflow vulnerability bsc1173580: CVE-2020-4044 Note that Tenable Network Security has extracted the preceding description block direct...

Stack Overflow Vulnerability in Rexchip Microelectronics Corporation's Rexchip Microchip

Rexchip Microelectronics has a R&D team specializing in system-on-chip design and algorithm research, and provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control, and many other fields. Rexchip Microelectroni...

Microsoft Hyper-V RemoteFX vGPU Buffer Overflow Vulnerability (CNVD-2020-45324)

Microsoft Windows is a popular operating system. A buffer overflow vulnerability exists in Microsoft Hyper-V RemoteFX vGPU that originates from a program's inability to properly validate authenticated user input on a virtual machine operating system. An attacker could exploit the vulnerability by...

Amazon Linux 2 : advancecomp (ALAS-2020-1450)

The version of advancecomp installed on the remote host is prior to 1.15-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1450 advisory. In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which...

Stack Overflow Vulnerability in CAJViewer

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a stack overflow vulnerability that can be exploited by an attacker to cause a denial of service...

Security update for nasm (moderate)

openSUSE Security Update: Security update for nasm Announcement ID: openSUSE-SU-2020:0954-1 Rating: moderate References: 1084631 1086186 1086227 1086228 1090519 1090840 1106878 1107592 1107594 1108404 1115758 1115774 1115795 1173538 Cross-References: CVE-2018-1000667 CVE-2018-10016 CVE-2018-10254...

CVE-2018-12371

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR 60.1, Thunderbird 60, an...

Ntop nDPI H.323 Parser Buffer Overflow Vulnerability

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A buffer overflow vulnerability exists in the ndpisearchh323 file in lib/protocols/h323.c of the H.323 parser in Ntop nDPI 3.2 and earlier versions. The vulnerability stems from a network system or product performing...

NVIDIA Virtual GPU Manager vGPU Buffer Overflow Vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. A buffer overflow vulnerability exists in NVIDIA Virtual GPU Manager vGPU plug-in, which originates when the software reads from a buffer by using a buffer access...

NVIDIA Virtual GPU Manager vGPU Buffer Overflow Vulnerability (CNVD-2021-27718)

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. A buffer overflow vulnerability exists in NVIDIA Virtual GPU Manager that originates from the vGPU plug-in not restricting or properly limiting operations within resourc...

Buffer Overflow Vulnerability in Multiple VMware Products (CNVD-2021-24361)

VMware ESXi is a server virtualization platform that can be installed directly on physical servers, VMware Workstation is a set of virtual machine software, and VMware Fusion is a set of virtual machine software designed to run Windows applications on Macs. VMware Fusion is a suite of virtual...