Important: ImageMagick

Issue Overview: Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via vectors involving the offset variable. CVE-2016-5841 ImageMagick 7.0.7-12 Q16, a CPU exhaustion...

The vulnerability of the Fast DDS library lies in the use of memory after it is freed, allowing a attacker to cause a service failure.

The vulnerability of the Fast DDS library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker who operates remotely to cause a service failure...

Debian: Security Advisory (DLA-3677-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3677-1] gimp-dds security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3677-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 30, 2023 https://wiki.debian.org/LTS -...

Debian dla-3677 : gimp-dds - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3677 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3677-1 [email protected] https://www.debian.org/lts/security/...

DLA-3677-1 gimp-dds - security update

Bulletin has no description...

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious DDS file. This can lead to the execution of unauthorized code within the...

Debian DSA-5568-1 : fastdds - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5568 advisory. It was discovered that incorrect memory management in Fast DDS, a C++ implementation of the DDS Data Distribution Service might result in denial of service. The oldstable...

SUSE CVE-2023-44441

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

CVE-2023-44441

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious DDS file, possibly enabling the execution of unauthorized code within the GIMP process. Mitigation Mitigation for this...

CVE-2023-44441

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DDS files. The...

CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

Double free

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

UBUNTU-CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

CVE-2023-42459

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

CVE-2023-42459 Malformed DATA submessage leads to bad-free error in Fast-DDS

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

CVE-2023-42459 Malformed DATA submessage leads to bad-free error in Fast-DDS

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free could...

CVE-2023-42459

CVE-2023-42459 affects Fast DDS (C++ implementation of DDS). A flaw in handling specific DATA submessages to a discovery locator can trigger a free() error, remotely crashing a Fast-DDS process and potentially leaving a freed pointer under attacker control, enabling a double-free scenario. Remedi...