PT-2023-4907

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds read in the tiffcrop utility of the libtiff library, which can be exploited to cause a denial-of-service via a crafted tiff file. Recommendations For version 4.4.0, use...

PT-2023-5349

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds read in the tiffcrop utility of the LibTIFF library, specifically in the tools/tiffcrop.c file at line 3592. This can lead to a denial-of-service when a crafted tiff fi...

PT-2023-4914

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3609, which can be exploited to cause a denial-of-service via a crafted tiff file. This can allow attackers t...

PT-2023-4913

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3516, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. Recommendatio...

PT-2023-4912

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility, located in tools/tiffcrop.c:3724, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. Recommendatio...

PT-2023-4910

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in tools/tiffcrop.c:3502. This can be exploited to cause a denial-of-service via a crafted tiff file...

PT-2023-4911

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0 Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in the files libtiff/tif unix.c:368, tools/tiffcrop.c:2903, and tools/tiffcrop.c:6778. This can be...

[SECURITY] Fedora 36 Update: pesign-115-4.fc36

This package contains the pesign utility for signing UEFI binaries as well as other associated tools...

jenkins-plugin/pipeline-utility-steps: Arbitrary file read vulnerability in Pipeline Utility Steps Plugin

A flaw was found in the Pipeline Utility Steps Jenkins Plugin. The affected version of the Pipeline Utility Steps Plugin does not restrict the set of enabled prefix interpolators and bundles versions of this library that enable the file: prefix interpolator by default. This flaw allows attackers...

SUSE-SU-2023:0324-1 Security update for apr-util

This update for apr-util fixes the following issues: - CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding bsc1207866...

[slackware-security] openssh

New openssh packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssh-9.2p1-i586-1slack15.0.txz: Upgraded. This release contains fixes for two security problems and a memory safety problem. The...

Slackware Linux 15.0 / current apr-util Vulnerability (SSA:2023-032-02)

The version of apr-util installed on the remote host is prior to 1.6.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-032-02 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker...

CVE-2022-25147

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

CVE-2022-25147 Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

CVE-2022-25147

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

CVE-2022-25147

CVE-2022-25147 is an out-of-bounds write vulnerability in APR-util’s apr_base64 functions, affecting APR-util versions up to 1.6.1 (and prior). Multiple advisories note the issue and list updates to APR-util as the mitigation (e.g., RHSA-2023:3145, ALSA/ALAS advisories for AlmaLinux/Amazon Linux,...

CVE-2022-25147

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

CVE-2022-25147: Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility APR-util 1.6.1 and prior versions...

PT-2023-9004

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility APR-util versions 1.6.1 and prior versions. Description The issue is related to an Integer Overflow or Wraparound vulnerability in the apr base64 functions of Apache Portable Runtime Utility APR-util, allowing a...

PT-2023-4908

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds read in the tiffcp utility, located in tools/tiffcp.c:948, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can lead to a...