CVE-2018-14471

CVE-2018-14471 affects GNU LibreDWG 0.5.1048, where dwg_obj_block_control_get_block_headers (dwg_api.c) can be triggered by a crafted DWG file to cause a denial of service via a NULL pointer dereference/SEGV. The issue is corroborated across multiple issuances (e.g., Red Hat, SUSE, CNVD, OSV, NVD...

Code injection

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

getfirstownedobject in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service SEGV...

CVE-2018-14443

The CVE affects GNU LibreDWG, specifically the dwg.c file function get_first_owned_object in version 0.5.1036. The underlying issue allows remote attackers to cause a denial of service via a segmentation fault (SEGV). The provided connected documents confirm the affected component and the crash b...

Security update for perl (important)

This update for perl fixes the following issues: This security issue was fixed: - CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files bsc1096718 This non-security issue was fixed: - fix debugger crash ...

GNU Libextractor Buffer Overflow Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. A stack-based buffer overflow vulnerability exists in the 'ecreadfilefunc' function unzip.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to execute...

GNU Libextractor mpeg_extractor.c File Infinite Loop Vulnerability

GNU Libextractor is a set of libraries developed by the GNU Project for extracting metadata from files. An infinite loop vulnerability exists in the 'EXTRACTORmpegextractmethod' function mpegextractor.c file in GNU Libextractor versions prior to 1.7. An attacker can exploit this vulnerability to...

DEBIAN-CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

Stack overflow

GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc unzip.c...

CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

CVE-2018-14346

GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc unzip.c...

CVE-2018-14346

GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc unzip.c...

CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

CVE-2018-14347

GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...

CVE-2018-14346

GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc unzip.c...

CVE-2018-14346

CVE-2018-14346 affects GNU Libextractor: a stack-based buffer overflow in ec_read_file_func (unzip.c) present in versions before 1.7. Multiple connected sources (Ubuntu/Debian/Mageia/OpenVAS/Nessus OSV entries) indicate the issue can lead to denial of service and, in some disclosures, arbitrary c...

CVE-2018-14346

GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc unzip.c...

CVE-2018-14346

GNU Libextractor before 1.7 has a stack-based buffer overflow in ecreadfilefunc unzip.c...