2323 matches found
UBUNTU-CVE-2020-27818
A flaw was found in the checkchunkname function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability...
Security update for minidlna (moderate)
openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2204-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes two vulnerabilities is now available...
OPENSUSE-SU-2020:2194-1 Security update for minidlna
This update for minidlna fixes the following issues: minidlna was updated to version 1.3.0 boo1179447 - Fixed some build warnings when building with musl. - Use $USER instead of $LOGNAME for the default friendly name. - Fixed build with GCC 10 - Fixed some warnings from newer compilers - Disallow...
Security update for minidlna (moderate)
openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2194-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...
MGASA-2020-0444 Updated pngcheck packages fix a security vulnerability
This update fixes a potential global buffer overflow in the checkchunkname function via a crafted png file...
[SECURITY] Fedora 33 Update: pngcheck-2.3.0-4.fc33
pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...
[SECURITY] Fedora 32 Update: pngcheck-2.3.0-4.fc32
pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...
[SECURITY] Fedora 31 Update: pngcheck-2.3.0-3.fc31
pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...
[SECURITY] Fedora 32 Update: pngcheck-2.3.0-3.fc32
pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...
EulerOS 2.0 SP9 : brotli (EulerOS-SA-2020-2163)
According to the version of the brotli package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a 'one-shot' decompression...
libpng: does not check length of chunks against user limit
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with From<InlineArray<A T>>.
...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation insert_from can have a memory-safety issue upon a panic.
...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with unit().
...
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation clone can have a memory-safety issue upon a panic.
...
Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30571)
Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2. The vulnerability stems from the Chunk implementation, where unit is executed without checking the size of the array. No details of the vulnerability are availab...
Unspecified Vulnerability in Mozilla Rust (CNVD-2021-30573)
Rust is a general-purpose, compiled programming language. A security vulnerability exists in Mozilla Rust version 0.6.2, which stems from a memory safety issue in the Chunk implementation, clone. No details of the vulnerability are available at this time...
Integer Overflow
qemu is vulnerable to integer overflow. qmpguestfileread in qga/commands-posix.c and qga/commands-win32.c in qemu-ga aka QEMU Guest Agent has an integer overflow causing a gmalloc0 call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploite...