CVE-2020-14377

A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an...

[SECURITY] [DLA 2376-1] qtbase-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2376-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 21, 2020 https://wiki.debian.org/LTS -...

EulerOS 2.0 SP3 : libsndfile (EulerOS-SA-2020-2094)

According to the versions of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in...

EulerOS 2.0 SP3 : qt (EulerOS-SA-2020-2136)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer...

EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2020-2126)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input...

OPENSUSE-SU-2020:1530-1 Security update for libqt4

This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...

OPENSUSE-SU-2020:1523-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2017-5499: Validate component depth bit bsc1020451. - CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456. -...

Security update for libqt4 (moderate)

openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1530-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Backports SLE-15-SP2 An upda...

CVE-2020-25624

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

CVE-2020-3399 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability

A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of an affected device. The...

FreeBSD : libxml -- multiple vulnerabilities (f5abafc0-fcf6-11ea-8758-e0d55e2a8bf9)

CVE mitre reports : CVE-2019-20388 xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. CVE-2020-7595 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. CVE-2020-24977 GNOME project libxml2...

openSUSE: Security Advisory for libqt4 (openSUSE-SU-2020:1501-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libqt4 (openSUSE-2020-1501)

This update for libqt4 fixes the following issues : - Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 - Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 - Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 - Fix crash when parsin...

OPENSUSE-SU-2020:1501-1 Security update for libqt4

This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...

OPENSUSE-SU-2020:1500-1 Security update for libqt4

This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...

Security update for libqt4 (moderate)

openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1501-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Leap 15.2 An update that...

Security update for libqt4 (moderate)

openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1500-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Backports SLE-15-SP1 An upda...

Information Disclosure

graphicsmagick is vulnerablet o information disclosure. The DescribeImage function of the magick/describe.c file contains a heap-based buffer over-read bug...

Arbitrary Code Execution

dhcpcd5 is vulnerable to arbitrary code execution. The vulnerability exists through a buffer over-read in the D6OPTIONPDEXCLUDE feature...

Denial Of Service (DoS)

gimp is vulnerable to denial of service DoS. The vulnerability exists through a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no \0 character after the version string...