SUSE-SU-2018:1851-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: These security issues were fixed: - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers to...

Stack overflow

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

CVE-2018-12983 affects PoDoFo: a stack-based buffer over-read in PdfEncryptMD5Base::ComputeEncryptionKey() (PdfEncrypt.cpp) in PoDoFo 0.9.6-rc1 can be exploited remotely via a crafted PDF to cause a denial of service. Multiple advisories confirm a PoDoFo memory-handling issue leading to DoS when ...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-12983

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file...

CVE-2018-13008: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2018-13006: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

PT-2018-11515 · Podofo +4 · Podofo +4

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6-rc1 Description: A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey function could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file. Recommendations: For PoDo...

CVE-2018-13009: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13011: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFValidate...

CVE-2018-13005: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-13007: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

[SECURITY] [DLA 1402-1] exiv2 security update

Package : exiv2 Version : 0.24-4.1+deb8u1 CVE ID : CVE-2018-10958 CVE-2018-10998 CVE-2018-10999 CVE-2018-11531 CVE-2018-12264 CVE-2018-12265 Debian Bug : 901706 901707 Several vulnerabilities have been discovered in exiv2, a C++ library and a command line utility to manage image metadata, resulti...

Heap overflow

In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in pbcMipnew in map.c...

CVE-2018-12915

In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calchash in map.c...

CVE-2018-12915

CVE-2018-12915 is a buffer over-read in the calc_hash function of map.c within the Liberty/Google protocol buffer library (PBC) static library libpbc.a, affected up to 2017-03-02. Multiple connected sources (Red Hat, CNVD, NVD, CVE listings) corroborate the description. The provided documents do ...