CVE-2017-9202

The CVE-2017-9202 issue affects ImageWorsener 1.3.1: imagew-cmd.c:854:45 in libimageworsener.a, related to imagew-api.c. A crafted image can trigger a divide-by-zero error, allowing remote denial of service. Documents confirm the vulnerable file and location, the affected version, and the DoS out...

Ubuntu 14.04 LTS / 16.04 LTS : Ghostscript regression (USN-3272-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3272-2 advisory. USN-3272-1 fixed vulnerabilities in Ghostscript. This change introduced a regression when the DELAYBIND feature is used with the eqproc command. This...

USN-3272-2 ghostscript regression

USN-3272-1 fixed vulnerabilities in Ghostscript. This change introduced a regression when the DELAYBIND feature is used with the eqproc command. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ghostscript improperly handled...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2017:1241-1)

This update for qemu fixes several issues. These security issues were fixed : - CVE-2017-2620: In CIRRUSBLTMODEMEMSYSSRC mode the bitblit copy routine cirrusbitbltcputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation bsc1024972 -...

jasper: missing SIZ marker segment XRsiz and YRsiz fields range check

The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted XRsiz value in a BMP image to the imginfo command...

CVE-2017-8842

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

UBUNTU-CVE-2017-8842

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

CVE-2017-8842

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

CVE-2017-8842

The bufRead::get function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted archive...

CVE-2017-8842

CVE-2017-8842 affects lrzip (Long Range ZIP), specifically the liblrzip/libzpaq.h path in lrzip 0.631. The root cause is the bufRead::get() function, which can be triggered by a crafted archive to cause a denial of service via a divide-by-zero error, leading to an application crash. Exploitation ...

PT-2017-18572 · Lrzip · Lrzip

Name of the Vulnerable Software and Affected Versions: lrzip version 0.631 Description: The issue is related to a divide-by-zero error and application crash that can be triggered by remote attackers via a crafted archive. This is caused by the bufRead::get function in libzpaq/libzpaq.h in...

SUSE SLES11 Security Update : audiofile (SUSE-SU-2017:1182-1)

This update for audiofile fixes the following issues: Security issues fixed : - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 - CVE-2017-6828: heap-based buffer overflow in readValue FileHandle.cpp bsc1026980 - CVE-2017-6829: global buffer...

Fedora 25 : ghostscript (2017-c85c0e5637)

Security fixes release for these CVEs : - CVE-2016-10217 use-after-free and application crash - CVE-2016-10218 NULL pointer dereference and application crash - CVE-2016-10219 divide-by-zero error and application crash - CVE-2016-10220 NULL pointer dereference and application crash - CVE-2017-5951...

SUSE-SU-2017:1182-1 Security update for audiofile

This update for audiofile fixes the following issues: Security issues fixed: - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 - CVE-2017-6828: heap-based buffer overflow in readValue FileHandle.cpp bsc1026980 - CVE-2017-6829: global buffer...

USN-3272-1 ghostscript vulnerabilities

It was discovered that Ghostscript improperly handled parameters to the rsdparams and eqproc commands. An attacker could use these to craft a malicious document that could disable -dSAFER protections, thereby allowing the execution of arbitrary code, or cause a denial of service application crash...

CVE-2016-7530

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by-zero error or out-of-bounds write via a crafted file...

CVE-2016-7530

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by-zero error or out-of-bounds write via a crafted file...

CVE-2016-7530

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by-zero error or out-of-bounds write via a crafted file...

Out-of-bounds

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service divide-by-zero error or out-of-bounds write via a crafted file...

Fedora 25 : 2:qemu (2017-01925dba3c)

chardev data is dropped when host side closed bz 1352977 - CVE-2016-8667: dma: divide by zero error in setnexttick bz 1384876 - IPv6 DNS problems in qemu user networking bz 1401165 - Fix crash in qxl memslotgetvirt bz 1405847 - CVE-2017-5579: serial: fix memory leak in serial exit bz 1416161 -...