CVE-2018-20536

CVE-2018-20536 affects libLAS 1.8.1, involving a heap-based buffer over-read in liblas SpatialReference::GetGTIF() that can cause a denial of service. Public references in the provided documents show Fedora updates (liblas 1.8.1-5.fc31 and 1.8.1-5.fc32) addressing this and related CVEs, indicatin...

CVE-2018-20536

Removed by vendor...

EulerOS 2.0 SP2 : libgxps (EulerOS-SA-2018-1428)

According to the version of the libgxps package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - heap based buffer over read in ftfontfacehash function of gxps-fonts.c CVE-2018-10733 Note that Tenable Network Security has extracted the precedin...

[SECURITY] [DLA 1619-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u5 CVE ID : CVE-2018-20184 CVE-2018-20185 CVE-2018-20189 Debian Bug : 916752 916719 916721 Multiple vulnerabilities have been found in GraphicsMagick, the image processing system. CVE-2018-20184 The WriteTGAImage function tga.c is affected by a...

Stack overflow

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20456

Radare2 before 3.1.1 is affected by a vulnerability in parseOperand inside libr/asm/p/asm_x86_nz.c, which can cause a denial of service (application crash via stack-based buffer over-read/overflow) when processing a crafted input file. The issue stems from the parseOperand implementation and resu...

CVE-2018-20456

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

Heap overflow

The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

Heap overflow

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20451

The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20451

The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20453

CVE-2018-20453 affects the libdoc library (getlong in numutils.c) with a heap-based buffer over-read in versions up to 2017-10-23. This can cause a denial of service (application crash) when parsing a crafted file. The connected documents corroborate the vulnerable component and impact; no patch/...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20451

The vulnerability CVE-2018-20451 affects the libdoc library (reader.c, process_file) through 2017-10-23, where a heap-based buffer over-read allows a crafted file to cause a denial of service (application crash). Connected sources consistently describe this as a heap-based over-read in the proces...