12196 matches found
CVE-2019-18849
In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving strdup...
EulerOS 2.0 SP5 : tcpdump (EulerOS-SA-2019-2233)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack...
EulerOS 2.0 SP5 : memcached (EulerOS-SA-2019-2213)
According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP...
EulerOS 2.0 SP3 : expat (EulerOS-SA-2019-2256)
According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox 50.CVE-2016-9063 - In libexpat before...
EulerOS 2.0 SP5 : SDL (EulerOS-SA-2019-2187)
According to the version of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from...
EulerOS 2.0 SP3 : elfutils (EulerOS-SA-2019-2272)
According to the versions of the elfutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - dwarfgetaranges in dwarfgetaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service heap-based...
EulerOS 2.0 SP3 : poppler (EulerOS-SA-2019-2269)
According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Poppler 0.68.0, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage thi...
EulerOS 2.0 SP3 : libjpeg-turbo (EulerOS-SA-2019-2251)
According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execu...
EulerOS 2.0 SP5 : unzip (EulerOS-SA-2019-2234)
According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute...
EulerOS 2.0 SP5 : libxml2 (EulerOS-SA-2019-2211)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - dict.c in libxml2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via an unexpected...
EulerOS 2.0 SP5 : libplist (EulerOS-SA-2019-2207)
According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory corruption vi...
EulerOS 2.0 SP5 : libcroco (EulerOS-SA-2019-2203)
According to the versions of the libcroco package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buff...
Amazon Linux 2 : libjpeg-turbo (ALAS-2019-1350)
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file.CVE-2016-3616 A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file...
CVE-2019-10542
Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesnt match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music i...
CVE-2019-10542
The CVE-2019-10542 issue affects a wide range of Qualcomm Snapdragon firmware components (e.g., Snapdragon Auto, Consumer Electronics Connectivity, Snapdragon Mobile, etc.). Root cause is a mismatch between the chunk length in the firmware header and the actual contents, leading to a possible buf...
CVE-2019-10542
Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesnt match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music i...
CVE-2019-18798
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...
CVE-2019-18798
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...
