15198 matches found
CVE-2020-6628
Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...
CVE-2020-6624
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...
CVE-2020-6625
CVE-2020-6625 affects the jhead tool (up to and including version 3.04). The vulnerability is a heap-based buffer over-read in Get32s invoked from ProcessGpsInfo in gpsinfo.c, which can lead to partial confidentiality/availability impact as per CVSS. Public advisories indicate multiple vendors/de...
Amazon Linux 2 : nss-softokn (ALAS-2020-1379)
The version of nss-softokn installed on the remote host is prior to 3.44.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1379 advisory. Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized befor...
CVE-2020-6624
CVE-2020-6624 affects jhead up to version 3.04, with a heap-based buffer over-read in process_DQT (jpgqguess.c). Public advisories confirm impact on multiple distros and urge upgrading to newer jhead releases to mitigate. Debian/OpenSUSE/Gentoo/GNU/Linux advisories reference fixes; Mageia advises...
openSUSE: Security Advisory for lz4 (openSUSE-SU-2019:2399-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-6624
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...
[ASA-202001-2] file: arbitrary code execution
Arch Linux Security Advisory ASA-202001-2 ========================================= Severity: High Date : 2020-01-09 CVE-ID : CVE-2019-18218 Package : file Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1083 Summary ======= The package file before version...
PT-2020-19191 · Mats Peterson +5 · Jhead +5
Name of the Vulnerable Software and Affected Versions: jhead versions 3.04 and earlier Description: The issue is a heap-based buffer over-read in the process DQT function located in jpgqguess.c. This occurs in the processing of certain data. Recommendations: For versions 3.04 and earlier, at the...
Amazon Linux 2 : oniguruma (ALAS-2020-1380)
The version of oniguruma installed on the remote host is prior to 5.9.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1380 advisory. Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. CVE-2019-16163 Oniguruma...
AIX 7.2 TL 2 : tcpdump (IJ20784)
https://vulners.com/cve/CVE-2018-14467 https://vulners.com/cve/CVE-2018-14467 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP. The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint. The LMP parser in...
openSUSE: Security Advisory for expat (openSUSE-SU-2019:2205-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-6622
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
CVE-2020-6618
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...
CVE-2020-6620
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8...
Heap overflow
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...
Heap overflow
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
CVE-2020-6622
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
CVE-2020-6618
The CVE-2020-6618 entry concerns the stb_truetype.h/STB library: versions through 1.22 contain a heap-based buffer over-read in stbtt__find_table. Multiple sources (NVD entry and various advisories) confirm the underlying issue but do not provide an explicit patched version in these documents. Im...