9357 matches found
CVE-2018-14739
An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbcpatternsetdefault in pattern.c...
Memory Leak
libpng.so is vulnerable to memory leak. The recommended error handling for pngreadimage causes a segmentation fault in the function pngfreedata in png.c when a malicious input is provided...
SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2018:2065-1)
This update for libsndfile fixes the following issues: Security issues fixed : - CVE-2018-13139: Fix a stack-based buffer overflow in psfmemset in common.c that allows remote attackers to cause a denial of service bsc1100167. - CVE-2017-17456: Prevent segmentation fault in the function d2alawarra...
SUSE-SU-2018:2065-1 Security update for libsndfile
This update for libsndfile fixes the following issues: Security issues fixed: - CVE-2018-13139: Fix a stack-based buffer overflow in psfmemset in common.c that allows remote attackers to cause a denial of service bsc1100167. - CVE-2017-17456: Prevent segmentation fault in the function d2alawarray...
SUSE-SU-2018:2074-1 Security update for libsndfile
This update for libsndfile fixes the following issues: Security issues fixed: - CVE-2018-13139: Fix a stack-based buffer overflow in psfmemset in common.c that allows remote attackers to cause a denial of service bsc1100167. - CVE-2017-17456: Prevent segmentation fault in the function d2alawarray...
SUSE SLES12 Security Update : xen (SUSE-SU-2018:2056-1)
This update for xen fixes the following issues: Security issues fixed : - CVE-2018-12617: Fix integer overflow that causes segmentation fault in qmpguestfileread with gmalloc bsc1098744. - CVE-2018-3665: Fix Lazy FP Save/Restore issue XSA-267 bsc1095242. - CVE-2018-11806: Fix heap buffer overflow...
UBUNTU-CVE-2018-14590
An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4Processor::ProcessFragments in Core/Ap4Processor.cpp...
GNU LibreDWG Denial of Service Vulnerability
GNU LibreDWG is a C language library developed by the GNU Project for working with DWG files. A denial of service vulnerability exists in the 'getfirstownedobject' function of the dwg.c file in GNU LibreDWG version 0.5.1036. A remote attacker could exploit this vulnerability to cause a denial of...
CVE-2018-14549
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wavwrite in libwav.c...
PYSEC-2018-62
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiopitchsetunit in pitch/pitch.c, as demonstrated by aubionotes...
DEBIAN-CVE-2018-14522
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiopitchsetunit in pitch/pitch.c, as demonstrated by aubionotes...
DEBIAN-CVE-2018-14521
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc...
libgig out-of-bounds read vulnerability (CNVD-2018-15177)
libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound level 1/2 files, KORG sample-based instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. An out-of-bounds read vulnerability exists in the "update...
Google Chrome - Swiftshader Texture Allocation Integer Overflow
Google Chrome - Swiftshader Texture Allocation Integer Overflow There's a remotely triggerable memory corruption issue in SwiftShader that's reachable from WebGL, resulting from an integer overflow issue. In the GPU process there is validation on the sizes passed to texture creation functions to...
Apache httpd -- multiple vulnerabilities
The Apache project reports: DoS for HTTP/2 connections by crafted requests CVE-2018-1333. By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. low modmd, DoS via Coredumps on specially crafted...
PNGwriter Denial of Service Vulnerability
PNGwriter is a C++ library for creating PNG images. A security vulnerability exists in the 'pngwriter::readfromfile' function in the pngwriter.cc file in PNGwriter version 0.7.0. An attacker can exploit this vulnerability to cause a denial of service segmentation error...
libwav Denial of Service Vulnerability (CNVD-2018-17202)
libwav is a wav encoding library written in C language. A security vulnerability exists in the 'wavfree' function of the libwav.c file in libwav 2017-04-20 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service segmentation error...
CentOS 6 : firefox (CESA-2018:2112)
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Security update for exiv2 (moderate)
This update for exiv2 to 0.26 fixes the following security issues: - CVE-2017-14864: Prevent invalid memory address dereference in Exiv2::getULong that could have caused a segmentation fault and application crash, which leads to denial of service bsc1060995. - CVE-2017-14862: Prevent invalid memo...