openSUSE 15 Security Update : SDL2 (openSUSE-SU-2022:0104-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0104-1 advisory. - SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2022:0104-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0104-1 advisory. - CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDLBlitCopy in video/SDLblitcopy.c vi...

SUSE-SU-2022:0104-1 Security update for SDL2

This update for SDL2 fixes the following issues: - CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP bsc1181202. - CVE-2020-14410: Fixed heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c via a...

OPENSUSE-SU-2022:0104-1 Security update for SDL2

This update for SDL2 fixes the following issues: - CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP bsc1181202. - CVE-2020-14410: Fixed heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c via a...

Pillow out-of-bounds read vulnerability (CNVD-2022-05433)

Pillow is a Python-based image processing library. An out-of-bounds read vulnerability exists in versions of Pillow prior to 9.0.0, which stems from a buffer over-read in pathgetbbox in path.c during initialization of ImagePath. An attacker could exploit this vulnerability to read memory-sensitiv...

Out-of-bounds Read in Pillow

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

DEBIAN-CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

Design/Logic Flaw

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

PYSEC-2022-9

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

CVE-2022-22816

CVE-2022-22816 affects Pillow’s image path handling. The vulnerability is a buffer over-read in path_getbbox() inside path.c during initialization of ImagePath.Path, present in Pillow versions before 9.0.0. The flaw can allow reading memory outside the intended bounds. The issue is mitigated by u...

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

Denial Of Service (DoS)

monit is vulnerable to denial of service. The vulnerability exists due to a buffer over-read in UtilurlDecode in util.c in Tildeslash Monit...

Debian: Security Advisory (DLA-2855-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2855-1] monit security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2855-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 27, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2855-1 : monit - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2855 advisory. Two vulnerabilities were fixed in monit, a utility for monitoring and managing Unix systems. CVE-2019-11454 Persistent cross-site scripting in http/cervlet.c...

SUSE SLED12: libqt4 / libqt4-32bit / libqt4-devel / libqt4-devel-doc / etc (SUSE-SU-2021:4155-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4155-1 advisory. - CVE-2021-3481: Fixed out of bounds read in QRadialFetchSimd from crafted svg file bsc1184783. - CVE-2020-17507: Fixed...