12221 matches found
Security update for expat (moderate)
openSUSE Security Update: Security update for expat Announcement ID: openSUSE-SU-2019:2204-1 Rating: moderate References: 1149429 Cross-References: CVE-2019-15903 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for expat fixe...
SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:2463-1)
This update for SDL2 fixes the following issues : Security issues fixed : CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c bsc1141844. CVE-2019-13626: Fixed integer overflow in IMAADPCMdecode in audio/SDLwave.c bsc1142031. Note that Tenable Network Security has...
SUSE SLED15 / SLES15 Security Update : djvulibre (SUSE-SU-2019:2452-1)
This update for djvulibre fixes the following issues : Security issues fixed : CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. CVE-2019-15144: Fixed denial-of-service caused by crafted PBM image...
SUSE-SU-2019:2452-1 Security update for djvulibre
This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2019-15142: Fixed heap-based buffer over-read bsc1146702. - CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files bsc1146569. - CVE-2019-15144: Fixed denial-of-service caused by crafted PBM imag...
CVE-2019-16748
In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...
CVE-2019-16748
In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...
CVE-2019-16748
In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignatureex in wolfcrypt/src/asn.c...
CVE-2019-16748
CVE-2019-16748 affects wolfSSL (through 4.1.0) due to a missing sanity check of memory accesses during ASN.1 certificate parsing in the handshake. The issue is a one-byte heap-based buffer over-read in CheckCertSignature_ex (wolfcrypt/src/asn.c). This can lead to a severe impact as reflected by C...
EulerOS 2.0 SP3 : SDL (EulerOS-SA-2019-2045)
According to the versions of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.CVE-2019-7572 - SDL...
SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2019:2440-1)
This update for expat fixes the following issues : Security issue fixed : CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...
SUSE-SU-2019:2440-1 Security update for expat
This update for expat fixes the following issues: Security issue fixed: - CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. bsc1149429...
SUSE-SU-2019:2429-1 Security update for expat
This update for expat fixes the following issues: Security issues fixed: - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. bsc1149429...
exiv2 security update
CentOS Errata and Security Advisory CESA-2019:2101 An update for exiv2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
FreeBSD : bro -- invalid memory access or heap buffer over-read (55571619-454e-4769-b1e5-28354659e152)
Jon Siwek of Corelight reports : This is a security patch release to address a potential Denial of Service vulnerability : - The NTLM analyzer did not properly handle AV Pair sequences that were either empty or unterminated, resulting in invalid memory access or heap buffer over-read. The NTLM...
CVE-2015-9381
FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...
EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2019-1955)
According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial ...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
Heap overflow
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...