PT-2015-6935

Name of the Vulnerable Software and Affected Versions Libav versions prior to 11.5 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a file with crafted dimensions. This is due to a problem in the ff h263...

UBUNTU-CVE-2015-5479

The ffh263decodemba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a file with crafted dimensions...

Oracle: Security Advisory (ELSA-2015-3054)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-3400

Name of the Vulnerable Software and Affected Versions lldpd versions prior to 0.8.0 Description The issue is related to a buffer overflow in the lldp decode function, which can be exploited by remote attackers to cause a denial of service, potentially leading to a daemon crash, and possibly execu...

[SECURITY] Fedora 22 Update: libvdpau-1.1.1-1.fc22

VDPAU is the Video Decode and Presentation API for UNIX. It provides an interface to video decode acceleration and presentation hardware present in modern GPUs...

libvdpau Directory Traversal Vulnerability

libvdpau is a Unix-like system video decoding and presentation API interface VDAPU Video Decode and Presentation API for Unix in the open source library files. A directory traversal vulnerability exists in versions of libvdpau prior to 1.1.1, which allows local users to gain privileges via the...

FFmpeg ff_rv34_decode_init_thread_copy denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffrv34decodeinitthreadcopy' function in the libavcodec/rv34.c file in versions of FFmpeg prior to 2.7.2, which is caused by the program failing to...

FFmpeg Denial of Service Vulnerability (CNVD-2015-05845)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'decodeihdrchunk' function in the libavcodec/pngdec.c file in versions of FFmpeg prior to 2.7.2, which can be exploited by remote attackers to cause a...

PT-2015-7371

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.7.2 Description The issue is related to multiple integer underflows in the ff mjpeg decode frame function, which can be exploited by remote attackers using crafted MJPEG data. This can lead to a denial of service due...

[SECURITY] Fedora 23 Update: libvdpau-1.1.1-1.fc23

VDPAU is the Video Decode and Presentation API for UNIX. It provides an interface to video decode acceleration and presentation hardware present in modern GPUs...

EMC RSA BSAFE multiple security vulnerabilities

Integer overflow in base64 decode, multiple crypto vulnerabilities...

ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities EMC Identifier: ESA-2015-081 CVE Identifier: CVE-2015-0533, CVE-2015-0534, CVE-2015-0535, CVE-2015-0536, CVE-2015-0537 Severity...

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the PKCS7dataDecode function in the OpenSSL library is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failures when using the PKCS7 specification...

[SECURITY] Fedora 22 Update: flac-1.3.1-5.fc22

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0104)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502739 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid executables Jann Horn Orabug: 21502254 CVE-2015-3339 -...

PT-2015-6214

Name of the Vulnerable Software and Affected Versions Libav versions prior to 10.7 Libav versions 11.x prior to 11.4 FFmpeg versions prior to 2.0.7 FFmpeg versions 2.2.x prior to 2.2.15 FFmpeg versions 2.4.x prior to 2.4.8 FFmpeg versions 2.5.x prior to 2.5.6 FFmpeg versions 2.6.x prior to 2.6.2...

PT-2015-2777

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.5.4 Description The issue is related to the ff mjpeg decode sof function in libavcodec/mjpegdec.c, which does not validate the number of components in a JPEG-LS Start Of Frame segment. This allows remote attackers to...

nss: QuickDER decoder length issue

The definitelengthdecoder function in lib/util/quickder.c in Mozilla Network Security Services NSS before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of an ASN.1 length is properly formed, which allows remote attackers to conduct data-smuggling attacks by using a long...

ClamAV upx.c pefromupx() UPX Decode Handling Remote Denial of Service Vulnerability

ClamAV is an anti-virus application. ClamAV upx.c pefromupx handles special files with a security vulnerability that allows remote attackers to exploit the vulnerability to crash the application...

Unmediated PCI command register access in qemu

ISSUE DESCRIPTION HVM guests are currently permitted to modify the memory and I/O decode bits in the PCI command register of devices passed through to them. Unless the device is an SR-IOV virtual function, after disabling one or both of these bits subsequent accesses to the MMIO or I/O port range...