SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1851-1)

This update for ImageMagick fixes the following issues: These security issues were fixed : - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers t...

Updated taglib packages fix security vulnerability

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file. CVE-2018-11439...

CVE-2018-13026

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFType...

CVE-2018-13026

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFType...

CVE-2018-13026

CVE-2018-13026 affects gpmf-parser version 1.1.2. The vulnerability is a heap-based buffer over-read in the function GPMF_Type within GPMF_parser.c. CNVD/CNVD-2019-34685 explicitly states the issue is a heap buffer overflow in GPMF_Type and notes an attacker can exploit this to cause a heap buffe...

CVE-2018-13011

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFValidate...

Heap overflow

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFValidate...

CVE-2018-13011

CVE-2018-13011 affects gpmf-parser version 1.1.2. The issue is a heap-based buffer over-read in GPMF_Validate (GPMF_parser.c), as described across multiple sources (NVD entry, CNVD, OSV, CVELIST). The vulnerability’s CVSSv3 base metrics indicate NETWORK vector, no user interaction, and HIGH impac...

CVE-2018-13009

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

Heap overflow

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2018-13007

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

Heap overflow

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

Heap overflow

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

Heap overflow

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13008

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2018-13007

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

DEBIAN-CVE-2018-13005

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-13005

GPAC MP4Box is affected by CVE-2018-13005 due to a heap-based buffer over-read in urn_Read (isomedia/box_code_base.c). Exploitation could crash MP4Box and, in some advisories, may allow arbitrary code execution. The Debian DLA-1432-1 advisory confirms two heap over-read conditions (CVE-2018-13005...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13007

CVE-2018-13007 affects gpmf-parser 1.1.2. The issue is a heap-based buffer over-read in GPMF_Next of GPMF_parser.c, linked to checks for GPMF_KEY_END and nest_level that are not conditioned on a buffer_size_longs check. Public sources describe a heap-based out-of-bounds read with high/critical im...