PHP 7.1.x < 7.1.29 Heap-based Buffer Overflow Vulnerability.

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.29. It is, therefore, affected by a heap-based buffer over-read condition within estrndup of the exifprocessIFDTAG in the exif.c script. An unauthenticated, remote attacker can exploit this, to caus...

openSUSE Security Update : GraphicsMagick (openSUSE-2019-1354)

This update for GraphicsMagick fixes the following issues : Security issues fixed : - CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage boo1133498. - CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage boo1133501. The following fixes...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2019:1354-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2019:1355-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-12839

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

CVE-2017-12839

A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service out-of-bounds read or possibly have unspecified other impact via a crafted mp3 file...

CVE-2019-11838

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njsarrayprototypesplice in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11839

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njsarrayprototypepush in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11839

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njsarrayprototypepush in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11839

CVE-2019-11839 affects the NGINX NJS component (njs up to 0.3.1). The vulnerability is a heap-based buffer overflow in Array.prototype.push after a resize, caused by mishandling the size in njs_array_expand (njs/njs_array.c). Red Hat and other sources confirm this is a year‑old entry, with common...

CVE-2019-11838

CVE-2019-11838 concerns njs (used in NGINX) up to version 0.3.1, with a heap-based buffer overflow in Array.prototype.splice after a resize. The root cause is reported as mishandling the size in njs_array_expand, affecting njs_array_prototype_splice in njs/njs_array.c. Documents consistently desc...

openSUSE Security Update : libjpeg-turbo (openSUSE-2019-1343)

This update for libjpeg-turbo fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service bsc1128712. - CVE-2018-11813: Fixed the...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1355-1 Rating: moderate References: 1132053 1132054 1133202 1133203 1133498 1133501 Cross-References: CVE-2019-11008 CVE-2019-11009 CVE-2019-11473 CVE-2019-11474 CVE-2019-11505 CVE-2019-11506 Affected...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2019:1343-1 Rating: moderate References: 1096209 1098155 1128712 Cross-References: CVE-2018-1152 CVE-2018-11813 CVE-2018-14498 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities ...

EulerOS 2.0 SP3 : poppler (EulerOS-SA-2019-1335)

According to the version of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap-based buffer underwrite exists in ImageStream::getLine located at Stream.cc in Poppler 0.74.0 that can for example be triggered by sending ...

openSUSE Security Update : ImageMagick (openSUSE-2019-1331)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel bsc1130330. - CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage bsc1131317. - CVE-2019-11007: Fixed a heap-based buffer overflow...

EulerOS 2.0 SP3 : SDL (EulerOS-SA-2019-1343)

According to the versions of the SDL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c inside the...

openSUSE Security Update : ntfs-3g_ntfsprogs (openSUSE-2019-1313)

This update for ntfs-3gntfsprogs fixes the following issues : Security issues fixed : - CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation bsc1130165. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable...

SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2019:1127-1)

This update for sqlite3 to version 3.28.0 fixes the following issues : Security issues fixed : CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in a...

openSUSE Security Update : ntfs-3g_ntfsprogs (openSUSE-2019-1314)

This update for ntfs-3gntfsprogs fixes the following issues : Security issues fixed : - CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation bsc1130165. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable...