Ubuntu 16.04 ESM : libwebp vulnerabilities (USN-4971-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4971-2 advisory. USN-4971-1 fixed several vulnerabilities in libwebp. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

Debian DLA-2677-1 : libwebp security update

Multiple security issues have been discovered in libwebp CVE-2018-25009 An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability. CVE-2018-25010 An out-of-bounds read was found in...

Debian: Security Advisory (DLA-2677-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2677-1] libwebp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2677-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky June 05, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2672-1 : libwebp security update

Multiple security issues have been discovered in libwebp CVE-2018-25009 An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability. CVE-2018-25010 An out-of-bounds read was found in...

CVE-2021-28091

An XML Signature Wrapping XSW vulnerability was found in Lasso. This flaw allows an attacker to modify a valid SAML response to include an unsigned SAML assertion, which may be used to impersonate another valid user recognized by the service using Lasso. The highest threat from this vulnerability...

golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The...

Ubuntu 18.04 LTS / 20.04 LTS : libwebp vulnerabilities (USN-4971-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4971-1 advisory. It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a...

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.

...

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.

...

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

...

CVE-2021-28906

A flaw was found in libyang. Missing checks in several readyin functions lead to NULL pointer dereferences possibly allowing a remote attacker to crash an application that uses libyang with user-controlled YIN formats. The highest threat from this vulnerability is the service availability...

CVE-2021-28903

A flaw was found in libyang. An uncontrolled recursion in lyxmlparseelem function allows a remote attacker to crash an application that uses libyang with user-controlled XML data. The highest threat from this vulnerability is the service availability...

CVE-2021-28904

A flaw was found in libyang. A NULL pointer dereference in extgetplugin function allows a remote attacker to crash an application that uses libyang with user-controlled YANG data. The highest threat from this vulnerability is the service availability...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37659)

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37657)

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp Out-of-Bounds Read Vulnerability

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. The vulnerability stems from a read out-of-bounds in WebPMuxCreateInternal and can be exploited by an attacker to threaten data confidentiality and service...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37654)

Libwebp is a WebP image format encoding and decoding library . An out-of-bounds read vulnerability exists in Libwebp versions prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37656)

Libwebp is a WebP image format encoding and decoding library . Libwebp versions prior to 1.0.1 are fully vulnerable. An attacker can exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37661)

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...