3890 matches found
CVE-2019-11852
The connected CVE details show ALEOS ACEView Service in ALEOS is affected by an out-of-bounds read that can disclose sensitive information. Affected versions are prior to 4.13.0, 4.9.5, and 4.4.9, with the ACEView service accessible by default on the LAN. The root cause is an out-of-bounds read i...
UBUNTU-CVE-2020-12403
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 which was not functioning correctly and strictly enforcing tag length...
Unspecified vulnerability in ImageIO component of multiple Apple products (CNVD-2020-49295)
Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.ImageIO ImageIO is a component that reads and writes image data. A security vulnerability exists in...
CVE-2020-12403
A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 which was not functioning correctly and strictly enforcing tag length. The highest threat from...
Debian DLA-2317-1 : pillow security update
It was noticed that in Pillow before 7.1.0, there are multiple out-of-bounds reads in libImaging/FliDecode.c. For Debian 9 stretch, this problem has been fixed in version 4.0.0-4+deb9u2. We recommend that you upgrade your pillow packages. For the detailed security status of pillow please refer to...
[SECURITY] [DLA 2317-1] pillow security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2317-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 08, 2020 https://wiki.debian.org/LTS -...
Vulnerabilities in SICK Package Analytics
SICK received a report about multiple security vulnerabilities in the Package Analytics software. Successful exploitation of these vulnerabilities could allow an unauthorized remote attacker to read and write the configuration of the software, read data directly from the file system and view...
Important: Red Hat Security Advisory: python-pillow security update
An update for python-pillow is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...
python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2
An out-of-bounds read/write flaw was found in python-pillow, in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable. This flaw allows an attacker to crash the application or potentially execute code on the system. The highest...
Important: Red Hat Security Advisory: python-pillow security update
An update for python-pillow is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
RHEL 8 : python-pillow (RHSA-2020:3299)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3299 advisory. The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representatio...
RHEL 8 : python-pillow (RHSA-2020:3302)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3302 advisory. The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representatio...
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-1809)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 : python-pillow (ELSA-2020-3185)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3185 advisory. - Fix for CVE-2020-5313 Resolves: rhbz1789532 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
Important: Red Hat Security Advisory: python-pillow security update
An update for python-pillow is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in...
RLSA-2020:3185 Important: python-pillow security update
The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in...
Out-of-bounds reads in Pillow
Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c...