RHEL 6 : freetype (RHSA-2019:4254)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4254 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual...

EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2019-2634)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ncurses 6.1, there is a NULL pointer dereference at function ncparseentry in parseentry.c that will lead to a denial of service attack. The...

EulerOS 2.0 SP3 : memcached (EulerOS-SA-2019-2631)

According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP...

EulerOS 2.0 SP3 : libplist (EulerOS-SA-2019-2613)

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libplist allows attackers to cause a denial of service large memory allocation and crash via vectors involving an offset size of...

[SECURITY] [DLA 2040-1] harfbuzz security update

Package : harfbuzz Version : 0.9.35-2+deb8u1 CVE ID : CVE-2015-8947 An issue has been found in harfbuzz, an OpenType text shaping engine. Due to a buffer over-read, remote attackers are able to cause a denial of service or possibly have other impact via crafted data. For Debian 8 "Jessie", this...

Moderate: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Updated ncurses packages fix security vulnerabilities

Updated ncurses packages fix security vulnerabilities: Heap-based buffer over-read in the ncfindentry function CVE-2019-17594. Heap-based buffer over-read in the fmtentry function CVE-2019-17595...

MGASA-2019-0387 Updated ncurses packages fix security vulnerabilities

Updated ncurses packages fix security vulnerabilities: Heap-based buffer over-read in the ncfindentry function CVE-2019-17594. Heap-based buffer over-read in the fmtentry function CVE-2019-17595...

CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

CVE-2019-19778

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c...

DEBIAN-CVE-2019-19778

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c...

CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

CVE-2019-19778

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c...

CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

Heap overflow

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c...

Heap overflow

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

CVE-2019-19778

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c...

CVE-2019-19778

CVE-2019-19778 affects libsixel 1.8.2 with a heap-based buffer over-read in load_sixel(), loader.c. CVSSv3.1 base score 8.8 (NETWORK, HIGH impact on confidentiality, integrity, and availability; user interaction required). Connected advisories corroborate issues across multiple libsixel versions ...

CVE-2019-19778

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function loadsixel at loader.c...

CVE-2019-19777

CVE-2019-19777 concerns stb_image.h 2.23 (the stb image loader), used by libsixel and others, with a heap-based buffer over-read in stbi__load_main. The provided documents confirm the presence of the vulnerability and its association with stb_image.h, but no public details about affected products...