php security update

CentOS Errata and Security Advisory CESA-2018:0406 An update for php is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

Heap overflow

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

CVE-2018-8001

CVE-2018-8001 affects PoDoFo 0.9.5 where UnescapeName() in PdfName.cpp contains a heap-based buffer over-read, enabling remote attackers to trigger a denial-of-service through a crafted PDF. Public advisories (openSUSE/SUSE) document fixes in PoDoFo 0.9.6 and later, and list CVE-2018-8001 among m...

CVE-2018-8001

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file...

Amazon Linux AMI : GraphicsMagick (ALAS-2018-966)

Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containin...

CVE-2018-7868

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7871

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact...

Heap overflow

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

Heap overflow

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

Heap overflow

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7875

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7871

CVE-2018-7871 corresponds to a heap-based buffer over-read in libming 0.4.8. Specifically, the getName function in util/decompile.c handles CONSTANT16 data and, under crafted input, can cause a denial of service (and potentially other impacts) due to memory over-reads. The connected advisories co...

CVE-2018-7868

The CVE-2018-7868 issue is a heap-based buffer over-read in libming 0.4.8, specifically in util/decompile.c:getName for CONSTANT8 data, leading to denial of service. Multiple connected sources corroborate this vulnerability and references to libming up to 0.4.8 (and related CVEs) being addressed ...

CVE-2018-7875

The CVE-2018-7875 issue affects libming 0.4.8, specifically the getString function in util/decompile.c when processing CONSTANT8 data. A crafted input can cause a heap-based buffer over-read and denial of service. Public advisories (e.g., Fedora update FEDORA-2019-4fdf19459d and Mageia MGASA-2019...

Scientific Linux Security Update : php on SL7.x x86_64 (20180306)

Security Fixes : - php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function CVE-2017-7890 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid107212; scriptversion"1.4";...

Important: GraphicsMagick

Issue Overview: Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of th...

php security update

5.4.16-43.1 - gd: fix buffer over-read into uninitialized memory CVE-2017-7890...

openSUSE Security Update : openexr (openSUSE-2018-229)

This update for openexr fixes the following issues : - CVE-2017-9110: In OpenEXR, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. bsc1040107 - CVE-2017-9114: In OpenEXR, an invalid read of size 1 in the refill function in ImfFastHuf.cpp coul...