SUSE-SU-2019:2753-1 Security update for xen

This update for xen to version 4.11.2 fixes the following issues: Security issues fixed: - CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service bsc1149813. - CVE-2019-12068: Fixed an issue in lsi which could lead to a...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libX11 Multiple Vulnerabilities (NS-SA-2019-0196)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libX11 packages installed that are affected by multiple vulnerabilities: - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libjpeg-turbo Multiple Vulnerabilities (NS-SA-2019-0185)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libjpeg-turbo packages installed that are affected by multiple vulnerabilities: - The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute...

UBUNTU-CVE-2019-17528

An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4TfhdAtom::SetDefaultSampleSize at Core/Ap4TfhdAtom.h when called from AP4Processor::ProcessFragments in Core/Ap4Processor.cpp...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2019-40954)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in AP4DescriptorListWriter::Action in Core/Ap4Descriptor.h in Bento4 1.5.1.0. An attacker can exploit this vulnerability to cause a SEGV error...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2019-40953)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in AP4Descriptor::GetTag in Core/Ap4Descriptor.h in Bento4 1.5.1.0. An attacker can exploit this vulnerability to cause a SEGV error...

GNU Binutils Integer Overflow Vulnerability

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. An integer overflow vulnerability exists in bfddwarf2findnearestline in dwarf2.c in the Binary File Descriptor BFD library used in GNU Binutils 2.3...

DEBIAN-CVE-2019-17451

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c, as demonstrated by nm...

UBUNTU-CVE-2019-17451

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c, as demonstrated by nm...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2019:2545-1)

This update for MozillaFirefox to 68.1 fixes the following issues : Security issues fixed : CVE-2019-9811: Fixed a sandbox escape via installation of malicious language pack. bsc1140868 CVE-2019-9812: Fixed a sandbox escape through Firefox Sync. bsc1149294 CVE-2019-11710: Fixed several memory...

PHP 7.3 disable_functions Bypass

= 0; $j-- $address = 8; return $out; function write&$str, $p, $v, $n = 8 $i = 0; for$i = 0; $i = 8; function leak$addr, $p = 0, $s = 8 global $abc, $helper; write$abc, 0x68, $addr + $p - 0x10; $leak = strlen$helper-a; if$s != 8 $leak %= 2 $s 8 - 1; return $leak; function parseelf$base $etype =...

EulerOS 2.0 SP3 : mod_auth_mellon (EulerOS-SA-2019-2009)

According to the versions of the modauthmellon package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The amreadpostdata function in modauthmellon before 0.11.1 does not check if the apgetclientblock function returns an error, which allows...

EulerOS 2.0 SP5 : qemu-kvm (EulerOS-SA-2019-1988)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or...

EulerOS 2.0 SP3 : qt (EulerOS-SA-2019-2012)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.CVE-2018-19869 Note that Tenable...

EulerOS 2.0 SP5 : patch (EulerOS-SA-2019-1982)

According to the versions of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.CVE-2015-1196 - GNU patch 2.7.2 and earli...

MGASA-2019-0272 Updated thunderbird packages fix security vulnerabilities

This update provides an update to thunderbird 68.0, updates enigmail to 2.1.2 and fixes the following security issues: Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and Thunderbird 68. CVE-2019-11709 Memory safety bugs fixed in Firefox 68 and Thunderbird 68. CVE-2019-11710 Script...

CVE-2019-16088

Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc...

Denial Of Service (DoS)

numpy is vulnerable to denial of service. A segmentation fault occurs when einsum is called with mixed subscripts, causing the application to crash. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

Denial Of Service (DoS)

numpy is vulnerable to denial of service DoS. Saving large arrays as csv causes a segmentation fault when it is executing with GCC 8.2.0 on python 3.6.7. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...

Denial Of Service (DoS)

numpy is vulnerable to denial of service DoS. The invocation of pickle.load on pickled void objects results in a crash. Note that an attacker could potentially obtain arbitrary code execution from the resulting segmentation fault...