CVE-2020-21535

CVE-2020-21535 affects fig2dev 3.2.7b (Xfig/Transfig) with a segmentation fault in gencgm_start (gencgm.c). OpenSUSE/SUSE advisories indicate this is fixed in fig2dev 3.2.8 Patchlevel 8b; update to that version to remediate. Other linked sources list the vulnerability among multiple CVEs in the s...

CVE-2020-21535

fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c...

CVE-2020-21530

CVE-2020-21530 affects fig2dev 3.2.7b, where a segmentation fault occurs in read.c::read_objects. The vulnerability is shown across multiple Linux distributions (Red Hat, Ubuntu, openSUSE/SUSE) as an unpatched issue; remediation is to upgrade to fig2dev 3.2.8 (Patchlevel 8b) or apply the vendor p...

CVE-2020-21530

fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...

CVE-2020-21530

fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...

CVE-2020-21605

libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited via a crafted a file...

CVE-2020-21605

CVE-2020-21605 affects libde265 v1.0.4, where a segmentation fault in the apply_sao_internal function can be triggered by processing a crafted file, potentially enabling a denial-of-service. Connected advisories corroborate the issue and point to multiple distributions addressing it by upgrading ...

fig2dev 安全漏洞

fig2dev is used to convert .fig files to various graphics languages and formats. A segmentation error vulnerability exists in the readobjects function in read.c in fig2dev version 3.2.7b. No details of the vulnerability are currently available...

Xfig fig2dev 缓冲区错误漏洞

fig2dev is used to convert .fig files to various graphics languages and formats. A segmentation error vulnerability exists in the gencgmstart function in gencgm.c in fig2dev version 3.2.7b. No detailed vulnerability details are currently available...

Libde265 代码问题漏洞

libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a segmentation error vulnerability in the applysaointernal function. An attacker can exploit the vulnerability via specially crafted files to cause a denial of service...

CVE-2020-21605

libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited via a crafted a file...

PT-2021-8177 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the clk component of the Linux kernel, where unbinding a CCU driver unmaps the device's MMIO region but leaves its clocks/resets and their providers registered...

None in vim/vim

✍️ Description Team, trust you are doing well. As part of continues fuzzing VIM v8.2.3425 in persistence mode, I found a heap use-after-free nvreplace. 🕵️‍♂️ Proof of Concept Affected version: VIM v8.2.3425 Tested on: Linux s157903 4.15.0-106-generic 107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x8664...

CVE-2021-39260

A crafted NTFS image can cause an out-of-bounds access in ntfsinodesyncstandardinformation in NTFS-3G 2021.8.22...

OESA-2021-1331 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: arch/x86/kvm/mmu/pagingtmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.CVE-2021-38198...

Solarwinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-69606)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. Solarwinds Orion Platform is a cross-site scripting vulnerability that can be exploited by attackers to store XSS via text box hyperlinks...

Solarwinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-101211)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices, and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network, etc....

SolarWinds Orion Platform SQL Injection Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from SolarWinds, Inc. The platform provides real-time monitoring and profiling of network devices and supports custom web interfaces, multiple user opinions, and map-based browsing of the entire network. The...

Denial Of Service

sqlite3 is vulnerable to denial of service. The vulnerability exists due to a segmentation fault via the idxGetTableInfo function...

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:1202-1 Rating: important References: 1180432 1180433 1180434 1180435 1182651 1186012 1187364 1187365 1187366 1187367 1187499 1187529 1187538 1187539 1189145 Cross-References: CVE-2020-35503 CVE-2020-35504...