CVE-2019-9588

There is an Invalid memory access in gAtomicIncrement located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to for example the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

CVE-2019-9587

CVE-2019-9587 affects Xpdf 4.01, specifically the md5Round1() function in Decrypt.cc. A crafted PDF can trigger a stack consumption issue, potentially causing a denial of service via segmentation fault and possibly other impact related to Catalog::countPageTree. The description does not specify a...

Does Zero Trust Security Have to be Hard to be Effective?

The short answer is no. As expected, the long answer is a little more nuanced. But first, a quick refresher on Zero Trust security for those who haven't jumped on the bandwagon yet. For those who have, feel free to skip the next section. Zero Trust Security Recap We know that the defensible netwo...

Denial Of Service (DoS)

libpoppler.so is vulnerable to denial of service DoS. The vulnerability exists because it does not limit the malicious pdfimages binary to JBIG2Stream::readTextRegion located in JBIG2Stream.cc, causing a segmentation fault...

CVE-2019-9544

An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4CttsTableEntry::AP4CttsTableEntry located in Core/Ap4Array.h. It can be triggered by sending a crafted file to for example the mp42hls binary. It allows an attacker to cause Denial of Service Segmentation fault or...

CVE-2019-9544

An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4CttsTableEntry::AP4CttsTableEntry located in Core/Ap4Array.h. It can be triggered by sending a crafted file to for example the mp42hls binary. It allows an attacker to cause Denial of Service Segmentation fault or...

CVE-2019-9543

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfseparate binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly...

Design/Logic Flaw

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfseparate binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly...

UBUNTU-CVE-2019-9543

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfseparate binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly...

Out-of-bounds

An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4CttsTableEntry::AP4CttsTableEntry located in Core/Ap4Array.h. It can be triggered by sending a crafted file to for example the mp42hls binary. It allows an attacker to cause Denial of Service Segmentation fault or...

CVE-2019-9545

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfseparate...

Design/Logic Flaw

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

CVE-2019-9544

Bento4 1.5.1-628 contains an out-of-bounds write in AP4_CttsTableEntry::AP4_CttsTableEntry() (Core/Ap4Array.h), exploitable by a crafted file sent to mp42hls. This can cause a Denial of Service (segmentation fault) and may have unspecified other impact. There is no remediation detail provided in ...

CVE-2019-9543

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to for example the pdfseparate binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly...

CVE-2019-9143

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

Live555 Streaming Media < 2019.02.27 Multiple Vulnerabilities - Windows

Live555 Streaming Media is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2019-9200

A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impa...

CentOS Update for kernel CESA-2019:0415 centos6

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 6 : kernel (CESA-2019:0415)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...