SUSE: Security Advisory (SUSE-SU-2020:0152-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:0224-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens TIM 4R-IE Devices

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: TIM 4R-IE Vulnerabilities: Incorrect Type Conversion or Cast, Improper Input Validation, Improper Authentication, Security Features, Null Pointer Dereference, Data Processing Errors,...

Linux kernel BPF Code Execution

The vulnerability of the BPF mechanism implemented by Linux operating system kernels is related to the lack of a data type conversion mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...

openbabel:fuzz_obconversion_sdf: Bad-cast to OpenBabel::OBRingData from OpenBabel::OBPairData in OpenBabel::OBMol::GetSSSR

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=5967464732164096 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: Bad-cast Crash Address:...

openbabel:fuzz_obconversion_sdf: Heap-buffer-overflow in OpenBabel::MDLFormat::ReadV3000Block

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4898459418230784 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

openbabel:fuzz_obconversion_sdf: Global-buffer-overflow in OpenBabel::OBGlobalDataBase::Init

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4814824962916352 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash...

CVE-2021-29662: Incorrect Type Conversion or Cast

The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-29424: Incorrect Type Conversion or Cast

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

CVE-2021-20289

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...

UBUNTU-CVE-2021-20289

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The...

[SECURITY] Fedora 32 Update: jasper-2.0.26-2.fc32

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora 33 Update: jasper-2.0.26-2.fc33

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

Ubuntu 16.04 LTS : OpenJPEG vulnerabilities (USN-4880-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4880-1 advisory. It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial ...

LibTIFF Image Conversion DoS

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

libqpdf Command Failure

The vulnerability of the libqpdf.a component of the command-line utility for converting PDF documents, QPDF, is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...

QPDF::resolveObjectsInStream Infinite Loop DoS

The vulnerability of the QPDF::resolveObjectsInStream function in the command-line PDF conversion tool is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause service failures...

QPDF PointerHolder Buffer Overflow DoS

The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...

QPDFTokenizer resolveLiteral DoS

The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line PDF conversion utility for QPDF documents involves infinite loop execution. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2020-11308: Improper Validation of Array Index

Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...