EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2019-2211)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - dict.c in libxml2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via an unexpected...

EulerOS 2.0 SP5 : unzip (EulerOS-SA-2019-2234)

According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute...

EulerOS 2.0 SP5 : libplist (EulerOS-SA-2019-2207)

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory corruption vi...

Amazon Linux 2 : libjpeg-turbo (ALAS-2019-1350)

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file.CVE-2016-3616 A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file...

CVE-2019-10542

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesnt match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music i...

CVE-2019-10542

The CVE-2019-10542 issue affects a wide range of Qualcomm Snapdragon firmware components (e.g., Snapdragon Auto, Consumer Electronics Connectivity, Snapdragon Mobile, etc.). Root cause is a mismatch between the chunk length in the firmware header and the actual contents, leading to a possible buf...

CVE-2019-10542

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesnt match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music i...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

Heap overflow

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...

CVE-2019-18798

LibSass before 3.6.3 contains a heap-based buffer over-read in Sass::weaveParents (ast_sel_weave.cpp). Public docs provided here confirm the affected component and the exact function, but do not include exploit details, affected versions beyond “before 3.6.3,” or remediation steps. No additional ...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exist through a buffer over-read in the eblobjectnote function in eblobjnote.c in libebl...

RHEL 8 : elfutils (RHSA-2019:3575)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3575 advisory. The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code. The...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:2896-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. CVE-2019-15141: Fixed a divide-by-zero vulnerabili...

Moderate: Red Hat Security Advisory: libjpeg-turbo security update

An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Low: Red Hat Security Advisory: elfutils security, bug fix, and enhancement update

An update for elfutils is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

ALSA-2019:3705 Moderate: libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...