Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2020-1049)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1079)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

curl: Division by zero if terminal width is 2

Summary: In fly there will be a division by zero if progress bar width is 2. That can happen if terminal width is 2. Steps To Reproduce: This script crash: stty rows 10 cols 2 ; curl --progress-bar somefile temp Impact I believe that if it's possible to set terminal width for a service, then that...

Security Bulletin: Action required for WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux

Summary IBM WebSphere Message Broker Hypervisor Edition V8.0 ship with Red Hat Enterprise Linux RHEL Server 6.2 which is vulnerable to: CVE-2019-1354 Vulnerability Details CVEID: CVE-2019-13454 DESCRIPTION: ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in...

openSUSE: Security Advisory for zziplib (openSUSE-SU-2019:2396-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2020-1020)

According to the version of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow...

Security Bulletin: Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-9936 DESCRIPTION: In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an...

Security Bulletin: IBM Integration Bus Hyper visor Edition V9.0 require customer action for security vulnerabilities in Red Hat Linux

Summary IBM Integration Bus Hypervisor Edition V9.0 ship with Red Hat Enterprise Linux RHEL Server 6.2 which is vulnerable to: CVE-2019-1354 Vulnerability Details CVEID: CVE-2019-13454 DESCRIPTION: ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c. CV...

SUSE SLED12 Security Update : zziplib (SUSE-SU-2019:3341-1)

This update for zziplib fixes the following issues : Security issues fixed : CVE-2018-16548: Avoid a memory leak from zzipparserootdirectory which could lead to denial of service. bsc1107424 CVE-2018-7727: Fixed a memory leak in unzzipcat bsc1084515. Non-security issue fixed: Prevented division b...

SUSE-SU-2019:3341-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issues fixed: - CVE-2018-16548: Avoid a memory leak from zzipparserootdirectory which could lead to denial of service. bsc1107424 - CVE-2018-7727: Fixed a memory leak in unzzipcat bsc1084515. Non-security issue fixed: - Prevented divisi...

The vulnerability of the Virtio Vring component in the QEMU hardware emulation software allows a hacker to induce a system failure.

The vulnerability of the Virtio Vring component in the QEMU hardware emulation software is related to division by zero errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2019-2119)

According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitesta...

EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2019-2111)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2019-2177)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner." Mitigation An user can mitigate the risk of this vulnerability by: 1 Avoid using...

openSUSE Security Update : zziplib (openSUSE-2019-2394)

This update for zziplib fixes the following issues : Security issue fixed : - CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed : - Prevented a division by zero bsc1129403. This update wa...

OPENSUSE-SU-2019:2396-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed: - Prevented a division by zero bsc1129403. This update was...

OPENSUSE-SU-2019:2394-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed: - Prevented a division by zero bsc1129403. This update was...

Security update for zziplib (moderate)

openSUSE Security Update: Security update for zziplib Announcement ID: openSUSE-SU-2019:2394-1 Rating: moderate References: 1107424 1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

Security update for zziplib (moderate)

openSUSE Security Update: Security update for zziplib Announcement ID: openSUSE-SU-2019:2396-1 Rating: moderate References: 1107424 1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...