12368 matches found
OPENSUSE-SU-2020:1530-1 Security update for libqt4
This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...
OPENSUSE-SU-2020:1523-1 Security update for jasper
This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2017-5499: Validate component depth bit bsc1020451. - CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456. -...
Security update for libqt4 (moderate)
openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1530-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Backports SLE-15-SP2 An upda...
CVE-2020-25624
hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...
CVE-2020-3399 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability
A vulnerability in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of an affected device. The...
openSUSE: Security Advisory for libqt4 (openSUSE-SU-2020:1501-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
FreeBSD : libxml -- multiple vulnerabilities (f5abafc0-fcf6-11ea-8758-e0d55e2a8bf9)
CVE mitre reports : CVE-2019-20388 xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. CVE-2020-7595 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. CVE-2020-24977 GNOME project libxml2...
openSUSE Security Update : libqt4 (openSUSE-2020-1501)
This update for libqt4 fixes the following issues : - Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 - Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 - Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 - Fix crash when parsin...
OPENSUSE-SU-2020:1501-1 Security update for libqt4
This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...
OPENSUSE-SU-2020:1500-1 Security update for libqt4
This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...
Security update for libqt4 (moderate)
openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1501-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Leap 15.2 An update that...
Security update for libqt4 (moderate)
openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1500-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Backports SLE-15-SP1 An upda...
Information Disclosure
graphicsmagick is vulnerablet o information disclosure. The DescribeImage function of the magick/describe.c file contains a heap-based buffer over-read bug...
Arbitrary Code Execution
dhcpcd5 is vulnerable to arbitrary code execution. The vulnerability exists through a buffer over-read in the D6OPTIONPDEXCLUDE feature...
Denial Of Service (DoS)
gimp is vulnerable to denial of service DoS. The vulnerability exists through a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no \0 character after the version string...
Denial Of Service (DoS)
elfutils is vulnerable to denial of service DoS. The vulnerability exists as a heap-based buffer over-read could occur through the handlegnuhash function in readelf.c with an ELF file...
Arbitrary Code Execution
gpac is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer over-read could occur through the function hdlrdump in isomedia/boxdump.c...
Denial Of Service (DoS)
tnef is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read in strdup, allowing an attacker may be able to write to the victim's .ssh/authorizedkeys file through an e-mail message with a crafted winmail.dat application/ms-tnef attachment...