Debian: Security Advisory (DLA-1611-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : ffmpeg (openSUSE-2015-963)

This update to ffmpeg 2.8.3 fixes the following security issues : - CVE-2015-8363: Check for duplicate SIZ marker / asanheap-oob boo957114 - CVE-2015-8364: Check image dimensions / integer overflow boo957115 - CVE-2015-8365: out of array access / asanheap-oob boo957116 %NASLMINLEVEL 70300 C Tenab...

CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...