PT-2020-21794

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A stack-buffer-overflow issue was identified, which can cause a crash. The crash occurs in the readstat convert, dta handle row, and dta handle rows...

PT-2020-21739

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions readstat convert, sas7bcat parse value labels, and sas7bcat parse...

Security Bulletin: OpenStack vulnerabilities affect IBM SmartCloud Entry(CVE-2015-7548, CVE-2015-8749 CVE-2015-1850)

Summary IBM SmartClound Entry is vulnerable to several Openstack Nova vulerabilities, which could allow a local authenticated attacker or a remote attacker to obtain sensitive information Vulnerability Details CVEID: CVE-2015-8749 DESCRIPTION: OpenStack Nova could allow a remote attacker to obtai...

PT-2020-22582

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: ycck cmyk convert, sep upsample,...

PT-2020-22542

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue was identified, characterized as an UNKNOWN READ. The crash state involves the functions H5T bit find, H5T conv i i, and H5T convert. Recommendations At the moment, there is no...

PT-2020-22527

Name of the Vulnerable Software and Affected Versions perfetto affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the perfetto::trace processor::ClockTracker module. Specifically, the functions ConvertSlowpath, Convert, and ToTraceTime...

OSV-2020-548 Heap-buffer-overflow in acommon::DecodeDirect<unsigned short>::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16531 Crash type: Heap-buffer-overflow READ 2 Crash state: acommon::DecodeDirect::decode acommon::Convert::convert aspellspellersuggest...

PT-2020-22391

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of specific functions such as...

PT-2020-22121

Name of the Vulnerable Software and Affected Versions heif affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the Op YCbCr422 to RGB 16bit::convert colorspace function, which is part of the heif::ColorConversionPipeline::convert...

PT-2021-10837

Name of the Vulnerable Software and Affected Versions libheif version 1.6.2 Description The issue is related to a buffer overflow vulnerability in the convert colorspace function in heif colorconversion.cc. This vulnerability allows attackers to cause a denial of service and disclose sensitive...

pmdk-convert bug fix and enhancement update

An update is available for pmdk-convert. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

ALEA-2020:1618 pmdk-convert bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

pmdk-convert bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update

An update is available for perl-LDAP, perl-Convert-ASN1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see...

perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALEA-2020:1575 perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Code Injection in elwerene/libreoffice-convert

Description The libreoffice-convert module is vulnerable against RCE since a command is crafted using user inputs not validated and then executed, leading to arbitrary command injection POC 1. Create the following PoC file: js // poc.js const libre = require'libreoffice-convert'; libre.convert'',...

DEBIAN-CVE-2013-7488

perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...

CVE-2013-7488

perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...

CVE-2013-7488

perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...