CVE-2018-14044

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...

DEBIAN-CVE-2018-14045

The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...

CVE-2018-14045

CVE-2018-14045 affects SoundTouch 2.0 (FIRFilter::evaluateFilterMulti in FIRFilter.cpp) and is associated with denial of service via remote exploitation demonstrated by SoundStretch. Related issues in the SoundTouch 2.0 stack include RateTransposer::setChannels (CVE-2018-14044), BPMDetect (CVE-20...

CVE-2018-14044

CVE-2018-14044 is a vulnerability in SoundTouch 2.0 (libSoundTouch.a) where RateTransposer::setChannels can trigger a denial of service via assertion failure and process exit, demonstrated by SoundStretch. The issue is tied to the RateTransposer component and affects SoundTouch 2.0 across several...

CVE-2018-14044

The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...

CVE-2018-14045

The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service assertion failure and application exit, as demonstrated by SoundStretch...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service DoS attacks. A malicious user can pass a file to the calcstepsizes function in jpcdec.c to cause an assertion failure that can crash the application...

FreeBSD : zziplib - multiple vulnerabilities (7764b219-8148-11e8-aa4d-000e0cd7b374)

NIST reports by search in the range 2017/01/01 - 2018/07/06 : 17 security fixes in this release : - Heap-based buffer overflow in the zzipget32 function in fetch.c. - Heap-based buffer overflow in the zzipget64 function in fetch.c. - Heap-based buffer overflow in the zzipmementryextrablock functi...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-12758)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in libavcodec in FFmpeg version 4.0.1, which is caused by the program failing to properly maintain consistency between the context profile field and the...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

Design/Logic Flaw

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

UBUNTU-CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13304

In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studioprofile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to errorresilience.c, h263dec.c, and...

CVE-2018-13304

In FFmpeg 4.0.1, the vulnerability CVE-2018-13304 stems from improper maintenance of consistency between the context profile field and studio_profile in libavcodec. This can trigger an assertion failure during conversion of a crafted AVI file to MPEG-4, potentially causing a denial of service. Af...

Debian DLA-1411-1 : tiff security update

Several issues were discovered in TIFF, the Tag Image File Format library, that allowed remote attackers to cause a denial of service or other unspecified impact via a crafted image file. CVE-2017-11613: DoS vulnerability A crafted input will lead to a denial of service attack. During the TIFFOpe...

openSUSE Security Update : tiff (openSUSE-2018-677)

This update for tiff fixes the following issues : These security issues were fixed : - CVE-2017-18013: There was a NULL pointer Dereference in the tifprint.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. bsc1074317 - CVE-2018-10963: The TIFFWriteDirectorySec function in...

openSUSE: Security Advisory for tiff (openSUSE-SU-2018:1834-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...