12145 matches found
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2253)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 8.1.1 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not...
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2279)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 8.1.1 allows attackers to cause a denial of service memory consumption because the reported size of a contained image is not...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2021-2279)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libvorbis (EulerOS-SA-2021-2248)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : libvorbis (EulerOS-SA-2021-2248)
According to the versions of the libvorbis packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393 - The barknoisehybridmp function in...
Debian DSA-4948-1 : aspell - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4948 advisory. A buffer overflow was discovered in the Aspell spell checker, which could result in the execution of arbitrary code. For the stable distribution buster, these...
Denial Of Service
hdf5 is vulnerable to denial of service. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...
Arbitrary Code Execution
hdf5 is vulnerable to arbtirary code execution. A heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
hdf5 is vulnerable to denial of service. A heap-based buffer over-read in H5Oattrdecode in H5Oattr.c allows attackers to cause crash the application via a malicious HDF5 file...
Information Disclosure
hdf5 is vulnerable to information disclosure. The vulnerability exists due to a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...
Debian DLA-2716-1 : pillow - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2716 advisory. - In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer...
Arm Mbed TLS Buffer Over Read Vulnerability
ARM mbed TLS is a product from ARM UK that provides secure communication and encryption for mbed products. a security vulnerability exists in versions prior to Arm Mbed TLS 2.24.0, which stems from the program having a buffer that reads data excessively. No details of the vulnerability are...
CVE-2020-36426
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...
CVE-2020-36426
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...
Buffer overflow
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...
UBUNTU-CVE-2020-36426
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...
CVE-2020-36426
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte...
CVE-2020-36426
An explicit technical detail: CVE-2020-36426 affects Arm Mbed TLS prior to 2.24.0, where mbedtls_x509_crl_parse_der has a one-byte buffer over-read. The connected documents corroborate this in multiple advisories (e.g., GLSA-202301-08 and Debian DLA/Debian advisories) and note a fixed release in ...
