3886 matches found
CVE-2015-8783
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds reads via a crafted TIFF image...
CVE-2015-8783
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds reads via a crafted TIFF image...
CVE-2015-8783
CVE-2015-8783 affects LibTIFF’s tif_luv.c: a crafted TIFF image can trigger out-of-bounds reads in the library, leading to denial of service. This vulnerability is part of multiple LibTIFF flaws reported across Debian, CentOS, Gentoo, F5 advisories, and cloud/Ubuntu postings. Exploitation details...
CVE-2015-8783
tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds reads via a crafted TIFF image...
Debian DLA-405-1 : tiff security update
Several security flaws have been found and solved in libtiff, a library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads and writes in the LogL16Decode, LogLuvDecode24, LogLuvDecode32, LogLuvDecodeTile, LogL16Encode, LogLuvEncode24,...
DSA-3460-1 privoxy - security update
Bulletin has no description...
Debian DLA-402-1 : tiff security update
Two security flaws have been found and solved in libtiff, library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads in the TIFFRGBAImage interface, when parsing unsupported values related to LogLUV and CIELab. CVE-2015-8665 was reported by...
[SECURITY] [DLA 402-1] tiff security update
Package : tiff Version : 3.9.4-5+squeeze13 CVE ID : CVE-2015-8665 CVE-2015-8683 Debian Bug : 809021 808968 Two security flaws have been found and solved in libtiff, library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads in the TIFFRGBAImage...
FreeBSD : privoxy -- multiple vulnerabilities (a763a0e7-c3d9-11e5-b5fe-002590263bf5)
Privoxy Developers reports : Prevent invalid reads in case of corrupt chunk-encoded content. CVE-2016-1982. Bug discovered with afl-fuzz and AddressSanitizer. Remove empty Host headers in client requests. Previously they would result in invalid reads. CVE-2016-1983. Bug discovered with afl-fuzz a...
DLA-402-1 tiff - security update
Bulletin has no description...
DLA-398-1 privoxy - security update
Bulletin has no description...
privoxy -- multiple vulnerabilities
Privoxy Developers reports: Prevent invalid reads in case of corrupt chunk-encoded content. CVE-2016-1982. Bug discovered with afl-fuzz and AddressSanitizer. Remove empty Host headers in client requests. Previously they would result in invalid reads. CVE-2016-1983. Bug discovered with afl-fuzz an...
MGASA-2016-0017 Updated libtiff package fixes security vulnerabilities
In libtiff, in tifnext.c, a potential out-of-bound write in NeXTDecode triggered by the test case for CVE-2015-1547 maptools bugzilla 2508. In libtiff, in tifgetimage.c, out-of-bound reads in the TIFFRGBAImage interface in case of unsupported values of SamplesPerPixel/ExtraSamples for LogLUV /...
Updated libtiff package fixes security vulnerabilities
In libtiff, in tifnext.c, a potential out-of-bound write in NeXTDecode triggered by the test case for CVE-2015-1547 maptools bugzilla 2508. In libtiff, in tifgetimage.c, out-of-bound reads in the TIFFRGBAImage interface in case of unsupported values of SamplesPerPixel/ExtraSamples for LogLUV /...
Internet Bug Bounty: Perl 5.22 VDir::MapPathA/W Out-of-bounds Reads and Buffer Over-reads
I have reported multiple vulnerabilities in Perl that have now been fixed. https://rt.perl.org/Public/Bug/Display.html?id=126755 --- Perl 5.22 suffers from two out-of-bounds read and multiple small buffer over-read vulnerabilities in the VDir::MapPathA and VDir::MapPathW functions that could...
libpng: buffer overflow
It was discovered that the pnggetPLTE and pngsetPLTE functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer...
Amazon Linux: Security Advisory (ALAS-2015-615)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : libpng (ALAS-2015-615)
It was discovered that the pnggetPLTE and pngsetPLTE functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer...
RedHat Update for libpng RHSA-2015:2594-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 6 : libpng (CESA-2015:2594)
Updated libpng packages that fix three security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for...