UBUNTU-CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

UBUNTU-CVE-2020-19492

There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2020-19491

There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2020-19491

CVE-2020-19491 affects sam2p 0.49.4. The vulnerability is caused by an invalid memory access in the cgif.c implementation, leading to a segmentation fault. A crafted input can cause denial of service or possibly unspecified other impact. No remediation/patch information is provided in the connect...

SUSE-SU-2021:2442-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3582: Fix possible mremap overflow in the pvrdma bsc1187499 - CVE-2021-3607: Ensure correct input on ring init bsc1187539 - CVE-2021-3608: Fix the ring init error flow bsc1187538 - CVE-2021-3611: Fix intel-hda segmentation fault due to...

SUSE-SU-2021:2428-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3595: Fixed an invalid pointer initialization may lead to information disclosure tftp. bsc1187366 - CVE-2021-3592: Fixed an invalid pointer initialization may lead to information disclosure bootp. bsc1187364 - CVE-2021-3594: Fixed an...

Sam2p 安全漏洞

sam2p is a command-line utility that converts many raster bitmap image formats such as GIF, JPG/JPEG, and PNG to PostScript or PDF files. sam2p version 0.49.4 is vulnerable to a segmentation error. The vulnerability stems from a floating-point exception in ReadImage. An attacker could exploit the...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2442-1 Rating: important References: 1187499 1187529 1187538 1187539 Cross-References: CVE-2021-3582 CVE-2021-3607 CVE-2021-3608 CVE-2021-3611 CVSS scores: CVE-2021-3582 SUSE: 3.2...

OpenSSL Multiple Vulnerabilities (20150108 - 1) - Linux

OpenSSL is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for sqlite3 (important)

openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2021:1058-1 Rating: important References: 1157818 1158812 1158958 1158959 1158960 1159491 1159715 1159847 1159850 1160309 1160438 1160439 1164719 1172091 1172115 1172234 1172236 1172240 1173641 928700 928701...

openSUSE 15 Security Update : lua53 (openSUSE-SU-2021:2196-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2196-1 advisory. - ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31...

Exiv2 输入验证错误漏洞

Exiv2 is a set of C libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in multiple formats such as EXIF, IPTC, and XMP.A security vulnerability exists in Exiv2 version 0.27.1, which stems from an integer overflow in Exiv2'...

PT-2021-7871 · Openjpeg2 +11 · Openjpeg2 +11

Name of the Vulnerable Software and Affected Versions: openjpeg2 version 2.4.0 Description: A flaw was found in the opj2 decompress program in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it...

OPENSUSE-SU-2021:2196-1 Security update for lua53

This update for lua53 fixes the following issues: Update to version 5.3.6: - CVE-2020-24371: lgc.c mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage bsc1175449 - CVE-2020-24370: ldebug.c allows a negation overflow and...

Denial Of Service

radare2 is vulnerable to denial of service. The vulnerability exists due to a segmentation fault in rx509parsealgorithmidentifier in libr/util/x509.c which allows an attacker to crash the application via malicious input...

Denial Of Service

radare2 is vulnerable to denial of service. The vulnerability exists due to a segmentation fault in parsetypedef in typedwarf.c via a malformed DWATname in the .debuginfo section which allows an attacker to crash the application via malicious input...

Security update for lua53 (moderate)

openSUSE Security Update: Security update for lua53 Announcement ID: openSUSE-SU-2021:2196-1 Rating: moderate References: 1175448 1175449 Cross-References: CVE-2020-24370 CVE-2020-24371 CVSS scores: CVE-2020-24370 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2020-24370 SUSE: 4...

OSV-2021-939 Segv on unknown address in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35912 Crash type: Segv on unknown address Crash state: helpeructracecode...

PT-2021-4561 · Sqlite +6 · Sqlite +6

Name of the Vulnerable Software and Affected Versions: SQLite version 3.36.0 Description: The issue is related to a segmentation fault that can occur in the sqlite3.exe command-line component of SQLite via the idxGetTableInfo function when there is a crafted SQL query. This can cause a denial of...

MGASA-2021-0310 Updated busybox packages fix security vulnerability

Updated busybox packages fix security vulnerability: decompressgunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data CVE-2021-28831...