CVE-2018-12064

CVE-2018-12064 affects the tinyexr library, specifically version 0.9.5. The vulnerability is a heap-based buffer over-read in the function tinyexr::ReadChannelInfo (in tinyexr.h), due to improper bounds handling. Affected impact indicates potential exposure of memory contents (out-of-bounds read)...

CVE-2018-12064

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...

SUSE-SU-2018:1601-1 Security update for memcached

This update fixes the following issues: - CVE-2016-8705: Server update remote code execution bsc1007870. - CVE-2017-9951: Heap-based buffer over-read in tryreadcommand function incomplete fix for CVE-2016-8705 bsc1056865...

Denial Of Service (DoS)

libjasper.so is vulnerableto denial of service DoS. The vulnerability exists because an attacker can send a malicious file to the jasimageishomosamp function in libjasper/base/jasimage.c, leading to heap-based buffer over-read and crash the application...

Important: curl

Issue Overview: Curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command...

CVE-2018-3562

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2018-3562

Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

[SECURITY] [DSA 4218-1] memcached security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4218-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2018 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4218-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

freexl is susceptible to denial of serviceDoS. The attack can launched by sending a malicious file to destroycell function, leading to heap-based buffer over-read...

CVE-2018-3569

A buffer over-read can occur during a fast initial link setup FILS connection in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2018-11439

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file...

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

Heap overflow

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2018-11576

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor...

CVE-2018-11576

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor...

SUSE SLES11 Security Update : curl (SUSE-SU-2018:1478-1)

This update for curl fixes the following issues : - CVE-2018-1000301: Fixed a buffer over-read caused by bad RTSP headers bsc1092098 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

CVE-2018-11576

CVE-2018-11576 affects MiniUPnP ngiflib 0.4, where a heap-based buffer over-read occurs in GifIndexToTrueColor within ngiflib.c. Multiple sources (NVD, CNVD, OSV, PRION) report this as a high-severity vulnerability with a network attack vector and no authentication required; CVSSv3 base score 9.8...