ImageMagick <= 7.0.8-36 Multiple Vulnerabilities - Windows

ImageMagick is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : elfutils (RHSA-2019:2197)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2197 advisory. The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code. The...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:2106-1)

This update for ImageMagick fixes the following issues : CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory bsc1140554. CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages bsc1140520. CVE-2019-13310: Fixed a memory...

NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Multiple Vulnerabilities (NS-SA-2019-0039)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has curl packages installed that are affected by multiple vulnerabilities: - curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libgxps Multiple Vulnerabilities (NS-SA-2019-0044)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libgxps packages installed that are affected by multiple vulnerabilities: - There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remo...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:2010-1)

This update for ImageMagick fixes the following issues : CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory bsc1140554. CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c bsc1140501. CVE-2019-13311: Fixed a memory leak at...

SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2019:2088-1)

This update for tcpdump fixes the following issues : Security issues fixed : CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716. Note that Tenable Network...

NewStart CGSL CORE 5.04 / MAIN 5.04 : tcpdump Multiple Vulnerabilities (NS-SA-2019-0071)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has tcpdump packages installed that are affected by multiple vulnerabilities: - The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print. CVE-2017-12986, CVE-2017-13725 - tcpdump 4.9...

SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2019:2087-1)

This update for tcpdump fixes the following issues : Security issues fixed : CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716. Note that Tenable Network...

Buffer Overflows

elfutils is vulnerable to heap-based buffer over-read. It is possible in libdw/dwarfgetabbrev.c and libwd/dwarfhasattr.c, leading to an application crash...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. It causes a heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges via a malicious file...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS attack. The attack is due to a heap-based buffer over-read occured in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils when an attacker passes a malicious input file...

Denial Of Service (Dos)

libjpeg-turbo is vulnerable to denial of service. A heap-based buffer over-read in the function get8bitrow in rdbmp.c allows an attacker to cause a denial of service using a malicious 80-bit BMP...

Arbitrary Code Execution

poppler is vulnerable to Arbitrary Code Execution. A heap-based buffer over-read in the function downsamplerowboxfilter in CairoRescaleBox.cc allows an attacker to crash the application or potentially execute arbitrary code on the system...

SUSE-SU-2019:2088-1 Security update for tcpdump

This update for tcpdump fixes the following issues: Security issues fixed: - CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716...

SUSE-SU-2019:2087-1 Security update for tcpdump

This update for tcpdump fixes the following issues: Security issues fixed: - CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716...

Moderate: Red Hat Security Advisory: libjpeg-turbo security update

An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Low: Red Hat Security Advisory: elfutils security, bug fix, and enhancement update

An update for elfutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Low: Red Hat Security Advisory: curl security and bug fix update

An update for curl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Buffer Over-read

libexiv2.so is vulnerable to buffer over-read. The function RafImage::readMetadata in rafimage.cpp ignores the buffer size when reading metadata of raf images which can lead to an out-of-bounds read...