OESA-2022-1915 libjpeg-turbo security update

libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, NEON, AltiVec to accelerate baseline JPEG compression and decompression on x86, x86-64, and ARM systems. Security Fixes: A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by...

UBUNTU-CVE-2022-40151

Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi leading to a crash and causing a denial of service.

...

lz4: memory corruption due to an integer overflow bug caused by memmove argument

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability...

CVE-2022-2980

A NULL pointer dereference vulnerability was found in vim's domouse function of the src/mouse.c file. The issue occurs with a mouse click when it is not initialized. This flaw allows an attacker to trick a user into opening a specially crafted input file, triggering the vulnerability that could...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists in rotateImage function in tiffcrop.c due to a memory corruption occurs during memory allocation into buffer which allows an attacker to cause an application crash via a crafted input...

GNU libiberty 缓冲区错误漏洞

libiberty is a collection of subroutines used by one of the GNU programs in the GNU community. A security vulnerability exists in GNU libiberty, which stems from a stack buffer overflow in the dlanglname function in d-demangle.c, which can be exploited by an attacker to potentially cause a denial...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

ALPINE-CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

DEBIAN-CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

DEBIAN-CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

ALPINE-CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

AZL-10824 CVE-2020-35538 affecting package libjpeg-turbo for versions less than 2.1.4-1

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

ALPINE-CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...