Heap overflow

TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff...

CVE-2018-10780

CVE-2018-10780 affects Exiv2 up to 0.26, causing a heap-based buffer over-read in Image::byteSwap2 (image.cpp). Connected PT Security entries describe additional Exiv2 issues across older branches (0.27.1 and earlier; also 0.26 and earlier) tied to PNG/CRW handling, PngChunk/parseChunkContent, Pn...

CVE-2018-10779

CVE-2018-10779 is a LibTIFF vulnerability describing a heap-based buffer over-read in TIFFWriteScanline (tif_write.c) of LibTIFF 3.8.2, with bmp2tiff used as demonstration. The connected sources corroborate this issue and list related advisories, but do not provide any public exploit details with...

CVE-2018-10780

Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...

CVE-2018-10779

TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff...

Stack overflow

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10767

CVE-2018-10767 is a vulnerability in libgxps up to version 0.3.0, caused by a stack-based buffer over-read in gxps_images_guess_content_type (gxps-images.c) when negative return values from g_input_stream_read are not rejected. A crafted input can trigger a remote denial of service. The connected...

MGASA-2018-0217 Updated links packages fix security vulnerability

Buffer over-read vulnerability in case of corrupted UTF-8 data CVE-2017-11114...

Updated links packages fix security vulnerability

Buffer over-read vulnerability in case of corrupted UTF-8 data CVE-2017-11114...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

Heap overflow

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

The CVE-2018-10733 issue is a heap-based buffer over-read in the libgxps component, specifically in ft_font_face_hash of gxps-fonts.c, affected through libgxps up to version 0.3.0. A crafted input can enable a remote denial of service. Connected advisories from multiple distributions (e.g., SUSE,...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

SUSE-SU-2018:1129-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - security update png.c CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. Attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file. bsc1086773 CVE-2018-10177: there i...

EulerOS 2.0 SP1 : curl (EulerOS-SA-2018-1109)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that libcurl did not safely parse FTP URLs when using the CURLOPTFTPFILEMETHOD method. An attacker, able to provide a specially craft...