CVE-2019-6130

CVE-2019-6130 affects MuPDF up to 1.14.0 (Artifex), with a SEGV in fz_load_page (fitz/document.c) linked to page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c. Connected advisories show mitigations via package upgrades: Debian DLA-1838-1 fixes mupdf for Jessie to 1.5-1+deb8u6;...

CVE-2019-6130

Artifex MuPDF 1.14.0 has a SEGV in the function fzloadpage of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c...

CVE-2018-20213

wbookaddworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service SEGV via a long name. NOTE: this is not a Microsoft product...

CVE-2018-20213

CVE-2018-20213 affects libexcel (libexcel.a, libexcel 0.01). The vulnerability is in wbook_addworksheet in workbook.c and triggers a segmentation fault (SEGV) when a long worksheet name is supplied. No exploit code or in-the-wild details are provided in the connected documents. Impact is denial o...

CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

Design/Logic Flaw

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-19497

In The Sleuth Kit TSK through 4.6.4, hfscattraverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service SEGV on unknown address with READ memory access in a tskgetu16 call in hfsdiropenmetacb in tsk/fs/hfsdent.c...

CVE-2018-19184

cmd/evm/runner.go in Go Ethereum aka geth 1.8.17 allows attackers to cause a denial of service SEGV via crafted bytecode...

CVE-2018-19184

CVE-2018-19184 affects Go Ethereum (geth) prior to or including 1.8.17, specifically in cmd/evm/runner.go. The vulnerability allows an attacker to trigger a denial-of-service (SEGV) through specially crafted bytecode, as documented in multiple sources (NVD entry for CVE-2018-19184 and SUSE/GHSA e...

CVE-2018-19121

An issue has been found in libIEC61850 v1.3. It is a SEGV in EthernetreceivePacket in ethernetbsd.c...

Design/Logic Flaw

An issue has been found in libIEC61850 v1.3. It is a SEGV in EthernetreceivePacket in ethernetbsd.c...

CVE-2018-19121

The CVE-2018-19121 issue affects libIEC61850 v1.3, causing a segmentation fault in Ethernet_receivePacket (ethernet_bsd.c). Across connected sources, the vulnerability is described as a SEGV rather than a clearly defined exploit; no fixed version is publicly listed in the provided documents. The ...

CVE-2018-19093

An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClientsetCommandTerminationHandler in client/clientcontrol.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the clientexamplecontrol program...

Denial of service

DISPUTED An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClientsetCommandTerminationHandler in client/clientcontrol.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the clientexamplecontrol program...

CVE-2018-19093

The vulnerability CVE-2018-19093 affects libIEC61850 v1.3, with a SEGV in ControlObjectClient_setCommandTerminationHandler implemented in client/client_control.c. Several sources agree on the issue and dispute due to alleged misuse of client_example_control, but all confirm the SEGV condition. No...

CVE-2018-19093

An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClientsetCommandTerminationHandler in client/clientcontrol.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the clientexamplecontrol program...

CVE-2018-18398

Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV. This could potentially be exploited by an arbitrary local user who creates files in /tmp before the victim uses this input method...

CVE-2018-18398

Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV. This could potentially be exploited by an arbitrary local user who creates files in /tmp before the victim uses this input method...

Design/Logic Flaw

Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV. This could potentially be exploited by an arbitrary local user who creates files in /tmp before the victim uses this input method...