Amazon Linux 2022 : openjpeg2, openjpeg2-devel, openjpeg2-tools (ALAS2022-2022-184)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-184 advisory. There is a flaw in the opj2compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by opj2compress, could trigger a heap...

[slackware-security] mozilla-nss

New mozilla-nss packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-nss-3.84-i586-1slack15.0.txz: Upgraded. Fixed a segmentation fault when the server requests a client auth cert but the...

Amazon Linux 2022 : fribidi, fribidi-devel (ALAS2022-2022-200)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-200 advisory. A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory...

Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2022-2679)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2022:3307-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3307-2 advisory. Security issues fixed: - CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C A...

ALPINE-CVE-2022-43245

Libde265 v1.0.8 was discovered to contain a segmentation violation via applysaointernal in sao.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

DEBIAN-CVE-2022-43245

Libde265 v1.0.8 was discovered to contain a segmentation violation via applysaointernal in sao.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

UBUNTU-CVE-2022-43245

Libde265 v1.0.8 was discovered to contain a segmentation violation via applysaointernal in sao.cc. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted video file...

EulerOS 2.0 SP10 : e2fsprogs (EulerOS-SA-2022-2647)

According to the versions of the e2fsprogs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code...

PT-2023-22485 · Unknown +4 · Llvm-Project +4

Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: A segmentation fault was discovered in the llvm-project via the component mlir::IROperandmlir::OpOperand. Recommendations: At the moment, there is no information about a newer version...

EulerOS 2.0 SP10 : e2fsprogs (EulerOS-SA-2022-2679)

According to the versions of the e2fsprogs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code...

AZL-43651 CVE-2022-44081 affecting package zopfli 1.0.3-7

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

CVE-2022-44081

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

CVE-2022-44081

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

AZL-45012 CVE-2022-44081 affecting package zopfli 1.0.3-7

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

Design/Logic Flaw

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

CVE-2022-44081

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The vulnerability exists due to a segmentation fault in the Image::printIFDStructure function in image.cpp which allows an attacker to crash the application via malicious tiff file...

CVE-2022-44081

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail...

CVE-2022-44081

CVE-2022-44081 affects LodePNG v20220717, where a segmentation fault is triggered in pngdetail(). The vulnerability is locally exploitable with user interaction required; CVSS v3.1 base score 5.5 (Medium), availability impact (High) per the records. Connected sources provide no concrete exploit d...