EulerOS 2.0 SP8 : oniguruma (EulerOS-SA-2020-1019)

According to the versions of the oniguruma package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.CVE-2019-16163 - An issue was discovered in...

UBUNTU-CVE-2019-20198

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlentok mishandles recursion, leading to stack consumption for a crafted XML file...

DEBIAN-CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

Stack overflow

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

UBUNTU-CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

CVE-2019-20176

In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...

CVE-2019-20176

CVE-2019-20176 affects Pure-FTPd 1.0.49, where a stack exhaustion vulnerability exists in the listdir function (ls.c). Exploitation is possible over network with no authentication and no user interaction, leading to availability impact (partial to high according to sources). The issue is caused b...

NewStart CGSL CORE 5.05 / MAIN 5.05 : binutils Multiple Vulnerabilities (NS-SA-2019-0228)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has binutils packages installed that are affected by multiple vulnerabilities: - An issue was discovered in armpt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangli...

Debian DSA-4593-1 : freeimage - security update

It was found that freeimage, a graphics library, was affected by the following two security issues : - CVE-2019-12211 Heap buffer overflow caused by invalid memcpy in PluginTIFF. This flaw might be leveraged by remote attackers to trigger denial of service or any other unspecified impact via...

UBUNTU-CVE-2019-20016

libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue...

EulerOS 2.0 SP3 : qpdf (EulerOS-SA-2019-2655)

According to the versions of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, relat...

Debian DLA-2031-1 : freeimage security update

It was found that freeimage, a graphics library, was affected by the following two security issues : CVE-2019-12211 Heap buffer overflow caused by invalid memcpy in PluginTIFF. This flaw might be leveraged by remote attackers to trigger denial of service or any other unspecified impact via crafte...

EulerOS 2.0 SP5 : tcpdump (EulerOS-SA-2019-2551)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint.CVE-2018-14461 - The ICMP parser in tcpdump before 4.9....

Denial of service

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service...

CVE-2019-11937

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service...

CVE-2019-11937

Summary: CVE-2019-11937 affects Mcrouter prior to v0.41.0. A large struct input in the Carbon protocol reader can cause stack exhaustion leading to denial of service. Affected component: Mcrouter, Carbon protocol reader. Cause: Unbounded/large struct input processing in the Carbon protocol reader...