SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:0679-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0679-1 advisory. - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM bsc1192050. - CVE-2021-21707: Fixed special character breaks path in...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of serivce. An invalid memory address dereference vulnerability exists in the dumpodtosaf.isra function, which causes a segmentation fault and application crash...

Use After Free

libxml2.so is vulnerable to use after free. The vulnerability exists in ID and IDREF attributes of several functions in valid.c due to lack of validations of which leads to an application crash...

Google Android Buffer Overflow Vulnerability (CNVD-2022-16339)

Google Android is a Linux-based open source operating system from Google. Google Android buffer overflow vulnerability, the vulnerability stems from improper boundary checking. An attacker can exploit the vulnerability to read invalid memory and cause the application to crash...

Ubuntu 20.04 LTS : MariaDB vulnerabilities (USN-5305-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5305-1 advisory. Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated t...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists in gfisomhintrtpread function which allows attackers to cause an application crash via a crafted file in the MP4Box command...

NULL Pointer Dereference

gpac:sid is vulnerable to null pointer dereference. The vulnerability exists in gpac in the lsrreadid.part function, which causes a segmentation fault and application crash...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS attacks. A vulnerability exists in gfsgcommanddel function, which causes a segmentation fault and application crash...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. An attacker can cause an application crash through the gfsvgdeleteattributevalue function due to the segmentation fault...

Denial Of Service (DoS)

gpac is vulnerable to denial of serive. The vulnerability exists because of a null pointer dereference exists in lsrreadanimvaluesex function which causes a segmentation fault and application crash...

NULL Pointer Dereference

gpac:sid is vulnerable to NULL pointer dereference. The vulnerability exist due to invalid memory address dereference vulnerability exists in gpac via the svgnodestart function, which causes a segmentation fault and application crash...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS attacks. A stack overflow vulnerability exists in the gfbifsdecprotolist function, which causes a segmentation fault and application crash...

CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

Denial Of Service (DoS)

metadata-extractor is vulnerable to denial of service.The vulnerability exists due to lack of catching an exception allows an attacker to send a malicious file to cause an application crash...

Denial Of Service (DoS)

metadata-extractor is vulnerable to denial of service. The vulnerability exists because the library does not properly handle memory allocation, allowing an attacker to send malicious input to cause large amounts of memory allocation and an application crash...

Denial Of Service (DoS)

Zip4j is vulnerable to denial of service. The vulnerability exists due to library does not properly handle exceptions. allowing an attacker to crash the application by providing a crafted ZIP file causing an application crash...

Improper Handling of Exceptional Conditions inn metadata-extractor

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

GHSA-P5PG-WM9Q-8V6R Improper Handling of Exceptional Conditions inn metadata-extractor

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

Uncaught Exception in zip4j

zip4j up to 2.9.1 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library...

CVE-2022-24615

zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library...