SUSE SLED12 Security Update : zziplib (SUSE-SU-2019:3341-1)

This update for zziplib fixes the following issues : Security issues fixed : CVE-2018-16548: Avoid a memory leak from zzipparserootdirectory which could lead to denial of service. bsc1107424 CVE-2018-7727: Fixed a memory leak in unzzipcat bsc1084515. Non-security issue fixed: Prevented division b...

SUSE-SU-2019:3341-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issues fixed: - CVE-2018-16548: Avoid a memory leak from zzipparserootdirectory which could lead to denial of service. bsc1107424 - CVE-2018-7727: Fixed a memory leak in unzzipcat bsc1084515. Non-security issue fixed: - Prevented divisi...

The vulnerability of the Virtio Vring component in the QEMU hardware emulation software allows a hacker to induce a system failure.

The vulnerability of the Virtio Vring component in the QEMU hardware emulation software is related to division by zero errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2019-2119)

According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitesta...

EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2019-2111)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2019-2177)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via...

CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner." Mitigation An user can mitigate the risk of this vulnerability by: 1 Avoid using...

openSUSE Security Update : zziplib (openSUSE-2019-2394)

This update for zziplib fixes the following issues : Security issue fixed : - CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed : - Prevented a division by zero bsc1129403. This update wa...

OPENSUSE-SU-2019:2396-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed: - Prevented a division by zero bsc1129403. This update was...

OPENSUSE-SU-2019:2394-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed: - Prevented a division by zero bsc1129403. This update was...

Security update for zziplib (moderate)

openSUSE Security Update: Security update for zziplib Announcement ID: openSUSE-SU-2019:2394-1 Rating: moderate References: 1107424 1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

Security update for zziplib (moderate)

openSUSE Security Update: Security update for zziplib Announcement ID: openSUSE-SU-2019:2396-1 Rating: moderate References: 1107424 1129403 Cross-References: CVE-2018-16548 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

SUSE-SU-2019:2750-1 Security update for zziplib

This update for zziplib fixes the following issues: Security issue fixed: - CVE-2018-16548: Prevented memory leak from zzipparserootdirectory. Free allocated structure if its address is not passed back. bsc1107424 Other issue addressed: - Prevented a division by zero bsc1129403...

The vulnerability of the Profinet software driver for automation and control systems in industrial processes, allowing a intruder to trigger a service failure.

The vulnerability of the Profinet software driver for automation and control systems in industrial processes involves division by zero errors. Exploiting this vulnerability could allow a malicious actor to trigger service failures by sending specially crafted DCP packets...

The vulnerability of the SeekIndex() function in the VideoLAN VLC media player software allows a hacker to manipulate data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the SeekIndex function in the VideoLAN VLC media player lies in its division by zero. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures...

PT-2019-5865 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/gem-private.h, related to division by zero. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...

PT-2019-5864 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/segment.c, where an attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math...

PT-2019-5862 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A flaw was found in ImageMagick in MagickCore/resize.c, where an attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math...

EulerOS 2.0 SP5 : qt (EulerOS-SA-2019-1904)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.CVE-2018-19872 Note that Tenable...

DEBIAN-CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner."...