CVE-2018-7554

There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7551

There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

Heap overflow

There is a heap-based buffer overflow in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7551

There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7553

There is a heap-based buffer overflow in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7554

There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7553

There is a heap-based buffer overflow in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7551

There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

Heap overflow

There is a heap-based buffer overflow in the LoadPCX function of inpcx.cpp in sam2p 0.49.4. A Crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7487

There is a heap-based buffer overflow in the LoadPCX function of inpcx.cpp in sam2p 0.49.4. A Crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7487

There is a heap-based buffer overflow in the LoadPCX function of inpcx.cpp in sam2p 0.49.4. A Crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7487

There is a heap-based buffer overflow in the LoadPCX function of inpcx.cpp in sam2p 0.49.4. A Crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7485

The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2017-18198

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

CVE-2017-18198

printiso9660recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service heap-based buffer over-read or possibly have unspecified other impact via a crafted iso file...

CVE-2018-7441

Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or winning a race condition, as demonstrated by /tmp/junksplitimage.ps in prog/splitimage2pdf.c...

CVE-2018-7247

An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input rootname can overflow a buffer, leading potentially to arbitrary code execution or possibly unspecified other impact...

CVE-2018-7226

An issue was discovered in vcSetXCutTextProc in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distribution through 0.9.10. Missing sanitization of the client-specified message length may cause integer overflow or possibly have unspecified other impact via a specially crafted VNC...

CVE-2018-6927

The futexrequeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service integer overflow or possibly have unspecified other impact by triggering a negative wake or requeue value...

CVE-2018-6836

The netmonreccommentdestroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...