UBUNTU-CVE-2019-14383

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2019-14382

The CVE-2019-14382 issue affects libopenmpt, specifically DSM handling during parsing of debug STL files, caused by an assertion failure in the parser prior to version 0.4.2. Multiple connected sources (SUSE/OpenSUSE advisories and OSV entries) confirm the vulnerable component and list the same r...

CVE-2019-14382

DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2019-14383

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2019-14383

CVE-2019-14383 affects libopenmpt prior to 0.4.2, where J2B parsing can trigger an assertion failure when handling debug STLs. Multiple third‑party advisories (SUSE/openSUSE updates and related OSS/OSV listings) confirm this vulnerability and show a fix was released in libopenmpt 0.4.2 and newer....

PT-2019-13653 · Openmpt +1 · Libopenmpt +1

Name of the Vulnerable Software and Affected Versions: libopenmpt versions prior to 0.4.2 Description: The issue is related to an assertion failure during file parsing when using debug STLs in libopenmpt. Recommendations: For versions prior to 0.4.2, update to version 0.4.2 or later to resolve th...

PT-2019-13654 · Openmpt +1 · Libopenmpt +1

Name of the Vulnerable Software and Affected Versions: libopenmpt versions prior to 0.4.2 Description: The issue is related to J2B in libopenmpt, which allows an assertion failure during file parsing when using debug STLs. Recommendations: For versions prior to 0.4.2, update to version 0.4.2 or...

RHEL 8 : bind (RHSA-2019:1714)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1714 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C Tenable...

bind: Race condition when discarding malformed packets can cause bind to exit with assertion failure

A race condition leading to denial of service was found in the way bind handled certain malformed packets. A remote attacker who could cause the bind resolver to perform queries on a server, which responds deliberately with malformed answers, could cause named to exit...

CVE-2019-13113

Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to assertion failure via an invalid data location in a CRW image file...

ALPINE-CVE-2019-13113

Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to assertion failure via an invalid data location in a CRW image file...

CVE-2019-13113

Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to assertion failure via an invalid data location in a CRW image file...

CVE-2019-13113

CVE-2019-13113 affects Exiv2 up to version 0.27.1, where an invalid data location in a CRW image file can cause a denial of service (crash). Public advisories list Exiv2 updates to 0.27.2 as the fix (and/or replacements in later releases); exploitation or in-wild details are not provided in the s...

UBUNTU-CVE-2019-13113

Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to assertion failure via an invalid data location in a CRW image file...

ISC BIND Race Condition Vulnerability (CVE-2019-6471)

According to its self-reported version, the instance of ISC BIND 9 running on the remote name server is between 9.11.0 and 9.11.7, 9.11.3-S1 and 9.11.7-S1, 9.12.0 and 9.12.4-P1, 9.13.x, 9.14.0 and 9.14.3, or 9.15 It is, therefore, affected by a race condition vulnerability, which may cause BIND t...

openSUSE Security Update : bind (openSUSE-2019-1532)

This update for bind fixes the following issues : Security issues fixed : - CVE-2018-5740: Fixed a denial of service vulnerability in the 'deny-answer-aliases' feature bsc1104129. - CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable...

Denial Of Service (DoS)

PyYAML is vulnerable to denial of service. An assertion failure resulting in a crash occurs when a context-dependent attackers enters input containing malicious line-wrapping...

SUSE SLES11 Security Update : bind (SUSE-SU-2019:14074-1)

This update for bind fixes the following issues : Security issues fixed : CVE-2018-5740: Fixed a denial of service vulnerability in the 'deny-answer-aliases' feature bsc1104129. CVE-2018-5743: Limiting simultaneous TCP clients is ineffective. bsc1133185 CVE-2018-5745: An assertion failure can occ...

Spidermonkey - IonMonkey Unexpected ObjectGroup in ObjectGroupDispatch Operation

While fuzzing Spidermonkey, I encountered the following commented and modified JavaScript program which crashes debug builds of the latest release version of Spidermonkey from commit https://github.com/mozilla/gecko-dev/commit/3ecf89da497cf1abe2a89d1b3c282b48e5dfac8c: function O1 this.s = 'foobar...

Spidermonkey - IonMonkey Unexpected ObjectGroup in ObjectGroupDispatch Operation Exploit

Spidermonkey IonMonkey suffers from an issue where an unexpected ObjectGroup in the ObjectGroupDispatch operation might lead to potentially unsafe code being executed. Spidermonkey: IonMonkey: unexpected ObjectGroup in ObjectGroupDispatch operation might lead to potentially unsafe code being...