Harbor Privilege Permission and Access Control Issues Vulnerability

Harbor is an open source trusted cloud native registry. The product is primarily used to store, sign and scan container images for vulnerabilities. A privilege permission and access control issue vulnerability exists in the core/api/user.go file in Harbor versions 1.7.0 through 1.8.2, which can b...

Trezor One Information Disclosure Vulnerability

Trezor One is a digital currency wallet device. An information disclosure vulnerability exists in Trezor One devices prior to version 1.8.2. The vulnerability stems from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the...

netfilter iptables buffer overflow vulnerability

netfilter is a packet filtering framework used on Linux systems. iptables is one of the modules. A buffer overflow vulnerability exists in netfilter iptables-restore in version 1.8.2. The vulnerability stems from a network system or product performing operations in memory without properly...

PT-2019-12256 · Netfilter +1 · Netfilter / Iptables +1

Name of the Vulnerable Software and Affected Versions: netfilter iptables version 1.8.2 Description: A buffer overflow issue exists, potentially allowing an attacker to crash the program or gain code execution through a specially crafted file. This issue is related to the add param to argv functi...

CVE-2019-5445

DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands...

PT-2019-17674 · Edgemax · Edgeswitch

Name of the Vulnerable Software and Affected Versions: EdgeMAX EdgeSwitch versions prior to 1.8.2 Description: A denial of service issue exists, allowing an Admin user to crash the SSH CLI interface by using crafted commands. Recommendations: For versions prior to 1.8.2, update to version 1.8.2 o...

DEBIAN-CVE-2019-11024

The loadpnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion...

PT-2019-12144 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is related to the load pnm function in frompnm.c in libsixel.a, which has infinite recursion. Recommendations: For libsixel version 1.8.2, at the moment, there is no information about a newer...

Apache Airflow Cross-Site Request Forgery Vulnerability

Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform has dynamic and scalable features. A cross-site request forgery vulnerability exists in Apache Airflow 1.8.2 and earlier versions. A...

Apache Airflow Remote Code Execution Vulnerability

Apache Airflow is the United States Apache Apache Software Foundation's set of open source platform for creating, managing and monitoring workflow. The platform has dynamic and scalable features. A security vulnerability exists in Apache Airflow 1.8.2 and earlier versions. A remote attacker can...

Fedora 29 : nbdkit (2018-c42a144c65)

New upstream version 1.8.2. Fix low priority security issue with TLS: https://www.redhat.com/archives/libguestfs/2018-December/msg00047.html ---- New upstream version 1.8.1. ---- Rebase to new stable version 1.8.0. ---- nbdkit metapackage should depend on versioned -server subpackage etc. ---- Ne...

UBUNTU-CVE-2018-19763

There is a heap-based buffer over-read at writer.c function: writepngtofile in libsixel 1.8.2 that will cause a denial of service...

DEBIAN-CVE-2018-19756

There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service...

DEBIAN-CVE-2018-19762

There is a heap-based buffer overflow at fromsixel.c function: imagebufferresize in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact...

PT-2018-15077 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: A heap-based buffer overflow occurs in the image buffer resize function within the fromsixel.c file of libsixel, potentially causing a denial of service or other unspecified impacts. Recommendations: For...

Libsixel Buffer Overflow Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A heap buffer overflow vulnerability exists in the fromsixel.c file the 'imagebufferresize' function in libsixel version 1.8.2, which can be exploited by an attacker to cause...

PT-2018-15076 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is related to an illegal address access in the sixel decode raw impl function within the fromsixel.c file of libsixel. This will cause a denial of service. Recommendations: For libsixel version...

PT-2018-15073 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is related to a NULL pointer dereference in the sixel helper set additional message function, located in the status.c file of the libsixel library. This will cause a denial of service...

PT-2018-15072 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is a heap-based buffer over-read located in the stb image.h file, specifically within the stbi tga load function, which can cause a denial of service. Recommendations: For libsixel version 1.8.2, ...

Libsixel Null Pointer Dereference Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A null pointer dereference vulnerability exists in the 'sixelhelpersetadditionalmessag' function status.c file in libsixel version 1.8.2, which can be exploited by an attacke...