CVE-2019-11455

CVE-2019-11455 is a buffer over-read in Monit’s Util_urlDecode (util.c). Pre-fix versions are affected; multiple advisories note the issue alongside CVE-2019-11454. Ubuntu/Debian/Fedora and Mageia/NASL records indicate fixes in updated Monit packages across distros (e.g., Debian 9 stretch fix in ...

CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...

CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...

CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...

SUSE SLES12 Security Update : php5 (SUSE-SU-2019:0985-1)

This update for php5 fixes the following issues : Security issues fixed : CVE-2019-9024: Fixed a vulnerability in xmlrpcdecode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas bsc1126821. CVE-2019-9020: Fixed a heap out of bounds in xmlrpcdeco...

openSUSE: Security Advisory for SDL (openSUSE-SU-2019:1223-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : SDL (openSUSE-2019-1223)

This update for SDL fixes the following issues : Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. - CVE-2019-7576: Fixed heap-based...

OPENSUSE-SU-2019:1223-1 Security update for SDL

This update for SDL fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. - CVE-2019-7576: Fixed heap-based...

CVE-2019-10650

In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file...

openSUSE: Security Advisory for SDL (openSUSE-SU-2019:1213-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for SDL (moderate)

openSUSE Security Update: Security update for SDL Announcement ID: openSUSE-SU-2019:1223-1 Rating: moderate References: 1124799 1124800 1124802 1124803 1124805 1124806 1124824 1124825 1124826 1124827 1125099 Cross-References: CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576...

openSUSE Security Update : SDL (openSUSE-2019-1213)

This update for SDL fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. - CVE-2019-7576: Fixed heap-based...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:0950-1)

This update for SDL2 fixes the following issues : Security issues fixed : CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. CVE-2019-7576: Fixed heap-based buff...

Security update for SDL (moderate)

openSUSE Security Update: Security update for SDL Announcement ID: openSUSE-SU-2019:1213-1 Rating: moderate References: 1124799 1124800 1124802 1124803 1124805 1124806 1124824 1124825 1124826 1124827 1125099 Cross-References: CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576...

SUSE-SU-2019:0950-1 Security update for SDL2

This update for SDL2 fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. - CVE-2019-7576: Fixed heap-based...

openSUSE Security Update : netpbm (openSUSE-2019-1200)

This update for netpbm fixes the following issues : - CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVE...

openSUSE Security Update : file (openSUSE-2019-1197)

This update for file fixes the following issues : The following security vulnerabilities were addressed : - Fixed an out-of-bounds read in the function docorenote in readelf.c, which allowed remote attackers to cause a denial of service application crash via a crafted ELF file bsc1096974...

Security update for netpbm (moderate)

openSUSE Security Update: Security update for netpbm Announcement ID: openSUSE-SU-2019:1200-1 Rating: moderate References: 1086777 Cross-References: CVE-2018-8975 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for netpbm fix...

Updated imagemagick packages fix security vulnerability

In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file. CVE-2019-10649 In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage o...

MGASA-2019-0142 Updated imagemagick packages fix security vulnerability

In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file. CVE-2019-10649 In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage o...