exiv2: SIGABRT caused by memory allocation in types.cpp:Exiv2::Internal::PngChunk::zlibUncompress()

In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call...

exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp

An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .avi file...

Exploit for CVE-2019-2525

VirtualBox 6.0.0 Exploit 1-day 사용할 VBox bug - CVE-2019-2525...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-44973 CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-44469 CVE-2017-12652 affecting package libpng12 1.2.57-16

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-45045 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43573 CVE-2017-12652 affecting package libpng12 1.2.57-16

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

DEBIAN-CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43468 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-45102 CVE-2017-12652 affecting package openjpeg2 2.3.1-12

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

CVE-2017-12652 affects libpng older than 1.6.32, where the library does not properly check the length of chunks against the user limit. This can lead to disclosure, data modification, or denial-of-service scenarios as indicated by the grouped references. Affected products are not limited to a sin...

DEBIAN-CVE-2019-13112

A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to an std::badalloc exception via a crafted PNG image file...

CVE-2019-13112

A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service crash due to an std::badalloc exception via a crafted PNG image file...

CVE-2019-13109

An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction...

kernel: Missing length check of payload in net/sctp/sm_make_chunk.c:_sctp_make_chunk() function allows denial of service

An error in the "sctpmakechunk" function net/sctp/smmakechunk.c when handling SCTP, packet length can be exploited by a malicious local user to cause a kernel crash and a DoS...

Product update: Virtuozzo 7.0 Update 9 Hotfix 2 (7.0.9-547)

The Hotfix 2 for for Virtuozzo 7.0.9 provides stability and usability bug fixes. Vulnerability id: PSBM-91577 Migration of a container from a Virtuozzo 7 Update 8 host to a Virtuozzo 7 Update 9 host initiated from Virtuozzo Automator could lead to a crash of vzmigrate. Vulnerability id: PSBM-9186...

HEVD pool overflow analysis-vulnerability warning-the black bar safety net

Prepare the environment Win 10 64-bit host + win 7 32-bit virtual machine Windbg: a debugger VirtualKD-3.0: double-click the debug tool InstDrv: the drive is installed, run the tool HEVD: a Windows kernel vulnerability training project, which almost covers the kernel may exist, all vulnerability...

PuTTY (European Commission - DIGIT): heap-use-after-free (READ of size 8) in main()

Summary: After downloading putty-0.70-2019-01-17.53747ad.tar.gz, I compiled it on Debian 9 with Clang-8.0.0 and AddressSanitizer and while trying to extract a public key from a crafted key, I triggered a heap-use-after-free in main. Description: add more details about this vulnerability Steps To...