CVE-2019-14970

A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2019-14437

The xiphSplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file...

Important: Red Hat Security Advisory: pango security update

An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2019-14814

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of servicesystem crash or possibly execute arbitrary code...

Amazon Linux AMI : poppler (ALAS-2019-1271)

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.CVE-2018-20481 In Poppl...

Oracle Linux 7 : pango (ELSA-2019-2571)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2571 advisory. - Security fix for CVE-2019-1010238 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Scientific Linux Security Update : binutils on SL7.x x86_64 (20190806)

Security Fixes : - binutils: integer overflow leads to heap-based buffer overflow in objdump CVE-2018-1000876 - binutils: Stack Exhaustion in the demangling functions provided by libiberty CVE-2018-12641 - binutils: NULL pointer dereference in workstuffcopytofrom in cplus- dem.c. CVE-2018-12697 C...

Scientific Linux Security Update : poppler on SL7.x x86_64 (20190806)

Security Fixes : - poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc CVE-2019-7310 - poppler: heap-based buffer overflow in function ImageStream::getLine in Stream.cc CVE-2019-9200 - poppler: infinite recursion in Parser::getObj function in Parser.cc CVE-2018-16646 - poppler: memo...

Apple macOS securityd Heap-based Buffer Overflow Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the sandbox on affected installations of Apple Safari. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the securityd service...

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2019-1834)

According to the version of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.CVE-2018-10779 Note that Tenable...

Scientific Linux Security Update : libguestfs-winsupport on SL7.x x86_64 (20190806)

Security Fixes : - ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128230; scriptversion"1.4";...

Scientific Linux Security Update : libjpeg-turbo on SL7.x x86_64 (20190806)

Security Fixes : - libjpeg: NULL pointer dereference in cjpeg CVE-2016-3616 - libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 - libjpeg-turbo: Divide By Zero in allocsarray function in jmemmgr.c CVE-2018-11212 -...

CVE-2019-15651

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASNBOOLEAN byte is mishandled for a crafted DER certificate in GetLengthex...

CVE-2019-15651

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASNBOOLEAN byte is mishandled for a crafted DER certificate in GetLengthex...

file CVE-2019-18218 Heap Based Buffer Overflow Vulnerability

Description file is prone to a heap-based buffer-overflow vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions. file versions 5.37 and prior are...

CVE-2019-15540

filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user...

CVE-2019-15540

The CVE-2019-15540 issue affects libmirage 3.2.2 in CDemu, specifically the CSO filter (filters/filter-cso/filter-stream.c). The root cause is that the part size is not validated, causing a heap-based buffer overflow. This can lead to local privilege escalation to root on Linux. Connected advisor...

Heap overflow

GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c...

CVE-2019-15531

GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTORdviextractmethod in plugins/dviextractor.c...

CVE-2019-15531

GNU Libextractor up to version 1.9 is affected by a heap-based buffer over-read in the DVI extractor (EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c). This could enable reading beyond allocated buffers. Public advisories (Debian DLA-2851-1, Mageia MGASA-2020-0015, OpenVAS/Nessus entries,...