9374 matches found
EulerOS 2.0 SP5 : memcached (EulerOS-SA-2019-2213)
According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP...
EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2019-2251)
According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execu...
CVE-2018-14884
An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because httpheadervalue in ext/standard/httpfopenwrapper.c can be a NULL value that is mishandled in an atoi call...
Arbitrary Code Execution
qt5-qtbase is vulnerable to arbitrary code execution. A segmentation fault in the QBmpHandler caused by a malicious BMP file allows arbitrary code execution in the system...
RHEL 8 : elfutils (RHSA-2019:3575)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3575 advisory. The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code. The...
Mozilla Firefox ESR < 31.5 Multiple Vulnerabilities
Binary data 701251.prm...
qt5-qtbase: QImage allocation failure in qgifhandler
An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault...
evince input validation error vulnerability
evince is a document viewer used in the GNOME desktop that supports PDF, PostScript, DjVu, TIFF and DVI formats. An input validation error vulnerability exists in evince, which stems from the program failing to check the number of pages, and can be exploited by an attacker to cause the applicatio...
CVE-2013-3718
evince is missing a check on number of pages which can lead to a segmentation fault...
DEBIAN-CVE-2013-3718
evince is missing a check on number of pages which can lead to a segmentation fault...
CVE-2013-3718
evince is missing a check on number of pages which can lead to a segmentation fault...
CVE-2013-3718
evince is missing a check on number of pages which can lead to a segmentation fault...
Design/Logic Flaw
evince is missing a check on number of pages which can lead to a segmentation fault...
CVE-2013-3718
evince is missing a check on number of pages which can lead to a segmentation fault...
CVE-2013-3718
CVE-2013-3718 affects the Evince document viewer. The root cause described across connected sources is a missing check on the number of pages, which can lead to a segmentation fault. Public references note this vulnerability across multiple distributions (Red Hat, SUSE, Debian, Ubuntu, etc.). The...
Mapserver Input Validation Error Vulnerability
Mapserver is the Open Source Geospatial OSGeo Foundation's suite of open source platforms for publishing spatial data and interactive map applications to the Web. An input validation error vulnerability in Mapserver versions 5.2, 5.4, and 5.6 prior to 5.6.5-2, which stems from the program failing...
Amazon Linux 2 : advancecomp (ALAS-2019-1319)
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified...
Amazon Linux 2 : mercurial (ALAS-2019-1328)
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function beuint32read located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified...
SUSE-RU-2019:2767-1 Recommended update for xen
This update for xen to version 4.10.4 fixes the following issues: - Fixed an issue where libxenlight could not restore domain vsa6535522 on live migration bsc1133818. - Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above bsc1137717. - Fixed an issue...
SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:2753-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)
This update for xen to version 4.11.2 fixes the following issues : Security issues fixed : CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service bsc1149813. CVE-2019-12068: Fixed an issue in lsi which could lead to an...