MGASA-2021-0241 Updated upx packages fix security vulnerabilities

The updated package fixes security vulnerabilities: A heap buffer overflow read was discovered in upx 4.0.0, because the check in plxelf.cpp is not perfect. CVE-2020-24119 A flaw was found in upx canPack in plxelf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service SEGV or...

OSV-2020-2140 Heap-double-free in flb_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27279 Crash type: Heap-double-free Crash state: flbfree flbhttpclientdestroy flbhttpclient...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. An OverflowError or MemoryError occurs in FpxImagePlugin.py on an unvalidated 32-bit integer when large number of bands is given, resulting in an application crash...

irssi:server-fuzz: Bad-free in sig_destroyed

Project: https://github.com/irssi/irssi.git Detailed Report: https://oss-fuzz.com/testcase?key=5716112825647104 Project: irssi Fuzzing Engine: afl Fuzz Target: server-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Bad-free Crash Address: 0x6190000016e0 Crash State: sigdestroyed...

Denial Of Service (Dos)

mysql is vulnerable to denial of service. An easy to exploit vulnerability allows a low privileged attacker to crash the server...

SUSE-SU-2018:4182-1 Security update for crash

This update for crash provides the following fix: - Update crash to support -bigmem kernel dumps for PPC64, including the ones that have extended process virtual address space support to 128TB bsc1075785, bsc1032471...

ytnef out-of-bounds read denial of service vulnerability (CNVD-2017-02559)

ytnef is an application library for extracting data from winmail.dat files. An out-of-bounds read vulnerability exists in ytnef. A remote attacker could exploit this vulnerability to construct a malicious file that could be parsed by the user, which could crash the application...

CVE-2016-6866

slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash...

DllHijackAuditor 3.5 - Stack Overflow Vulnerability

Document Title: =============== DllHijackAuditor 3.5 - Stack Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1954 Release Date: ============= 2016-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 1954...

Apache Httpd < 2.4.7 : mod_cache crash

A NULL pointer dereference was found in modcache. A malicious HTTP server could cause a crash in a caching forward proxy configuration. Note that this vulnerability was fixed in the 2.4.7 release, but the security impact was not disclosed at the time of the release...

Microsoft Internet Explorer DoS

Crash on recursive CSS inclusion...

cyrus-imapd DoS

Crash on parsing message References: header...

Network Service Long Line Handling Remote DoS

It was possible to kill the service by sending a single long text line. This may indicate the presence of a buffer overflow. An attacker may be able to use this flaw to crash your software or even execute arbitrary code on your system. C Tenable Network Security, Inc. include"compat.inc"; if...