EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-2277)

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a...

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2019-2288)

According to the version of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a...

Oracle Linux 8 : SDL (ELSA-2019-3951)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3951 advisory. - Fix CVE-2019-13616 a heap buffer over-read in BlitNtoN bug 1747237 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

CVE-2019-18676

An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote...

CVE-2019-18676

An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote...

CVE-2019-18676

An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote...

CVE-2019-18676

An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote...

CVE-2019-18676

CVE-2019-18676 affects Squid 3.x and 4.x up to 4.8, where incorrect input validation enables a heap-based buffer overflow that can cause a Denial of Service to all clients using the proxy. The connected advisories describe the issue scope and related CVEs in the same Squid codebase (URn/URI proce...

CVE-2011-3631

Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to be used. A remote attacker could provide a specially-crafted directory tree and trick the local us...

libVNC File Transfer Extension Heap-based Buffer Overflow (CVE-2018-15127)

A heap-based buffer overflow vulnerability has been reported in libVNC. The vulnerability is due improper validation of the file transfer request by the File Transfer extension. Successful exploitation may result in remote code execution on the target server...

RHEL 8 : SDL (RHSA-2019:3951)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3951 advisory. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device...

CVE-2019-19246

Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in strlowercasematch in regexec.c...

CVE-2019-19246

CVE-2019-19246: Oniguruma (used in PHP 7.3.x and others) has a heap-based buffer over-read in str_lower_case_match (regexec.c). Public advisories confirm the issue affects Oniguruma up to 6.9.3 and can lead to denial of service or code execution when processing crafted regex inputs. Affected soft...

CVE-2019-14896

A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service system crash or, possibly execute arbitrary code, when the lbsibssjoinexisting function is called after a STA connects to...

Important: Red Hat Security Advisory: SDL security update

An update for SDL is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: Red Hat Security Advisory: SDL security update

An update for SDL is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

openSUSE Security Update : ncurses (openSUSE-2019-2551)

This update for ncurses fixes the following issues : Security issues fixed : - CVE-2019-17594: Fixed a heap-based buffer over-read in the ncfindentry function bsc1154036. - CVE-2019-17595: Fixed a heap-based buffer over-read in the fmtentry function bsc1154037. Non-security issue fixed : - Remove...

Security update for ncurses (moderate)

openSUSE Security Update: Security update for ncurses Announcement ID: openSUSE-SU-2019:2551-1 Rating: moderate References: 1103320 1154036 1154037 Cross-References: CVE-2019-17594 CVE-2019-17595 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is...

CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...

CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read...