MGASA-2019-0132 Updated libjpeg packages fix security vulnerability

get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...

Updated libjpeg packages fix security vulnerability

get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...

MGASA-2019-0128 Updated advancecomp packages fix security vulnerability

advancecomp has been updated to fix a security issue that could be triggered when pressented with a malformed PNG file. advancecomp contained an integer overflow upon encountering an invalid PNG size, which could result in a buffer overflow CVE-2019-9210, as well as a heap-based buffer over-read...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10871

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc...

Heap overflow

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10872

CVE-2019-10872 : Poppler 0.74.0 contains a heap-based buffer over-read in Splash::blitTransparent (splash/Splash.cc). Documented in multiple advisories (e.g., SUSE/OpenSUSE updates referencing this CVE) as fixed in patched releases; remediation typically involves applying the vendor advisory patc...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10871

Poppler 0.74.0 contains a heap-based buffer over-read in PSOutputDev::checkPageSlice (PSOutputDev.cc), identified as CVE-2019-10871. The issue is documented across multiple advisories (SUSE/OpenSUSE, EulerOS, etc.) as a vulnerability in Poppler, with no additional exploit details provided in the ...

openSUSE Security Update : ImageMagick (openSUSE-2019-1141)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function bsc1128649. - CVE-2018-18544: Fixed a memory leak in the function WriteMSLImage bsc1113064. - CVE-2018-20467: Fixed an infinite loop in coders/bmp....

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2019:1141-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

Denial Of Service (DoS)

libhtp.so is vulnerable to denial of service DoS. The vulnerability exists as a buffer over-read occurs when a malicious input is passed to the function htpparseauthorizationdigest in htpparsers.c...

CVE-2018-10243

htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...

CVE-2018-10243

htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...

Heap overflow

htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...

CVE-2018-10243

htpparseauthorizationdigest in htpparsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header...

CVE-2018-10243

CVE-2018-10243 affects LibHTP 0.5.26: the function htp_parse_authorization_digest in htp_parsers.c can cause a heap-based buffer over-read when processing an authorization digest header. This is a remote, network-exploitable condition reported across multiple sources (OSV, Debian/NASL references)...