CVE-2018-25010

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter...

CVE-2018-25010

CVE-2018-25010 affects libwebp; a heap-based buffer overflow occurs in ApplyFilter() in versions before 1.0.1. Public documents consistently describe an out-of-bounds condition in libwebp that can crash the library and potentially enable arbitrary code execution. Affected advisories and vendor bu...

CVE-2018-25009

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...

CVE-2018-25009

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...

CVE-2020-36328

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-36328

CVE-2020-36328 concerns a heap-based buffer overflow in libwebp where WebPDecodeRGBInto may overflow due to an invalid buffer-size check, impacting data confidentiality, integrity, and availability. It affects versions before 1.0.1; multiple connected advisories confirm the same root cause and ve...

CVE-2021-31439

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results fr...

CVE-2018-25009: Out-of-bounds Read

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...

CVE-2018-25010: Out-of-bounds Read

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter...

CVE-2018-25013: Out-of-bounds Read

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes...

CVE-2020-36328: Out-of-bounds Write

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2018-25011: Out-of-bounds Write

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...

CVE-2018-25012: Out-of-bounds Read

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24...

Oracle Linux 6 : perl (ELSA-2021-9238)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9238 advisory. - Backport patch for CVE-2020-10543 Orabug: 32855589 - Backport patch for CVE-2020-10878 Orabug: 32855589 Tenable has extracted the preceding descripti...

CVE-2021-31439: Heap-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results fr...

Vulnerability Spotlight: Heap-based buffer overflow in Google Chrome could lead to code execution

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable heap-based buffer overflow vulnerability in Google Chrome. Google Chrome is a cross-platform web browser — and Chromium is the open-source... This is only the...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2021:1654-1)

This update for libxml2 fixes the following issues : CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer overflow in...

SUSE SLES12 Security Update : libxml2 (SUSE-SU-2021:1658-1)

This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer...

RHEL 8 : perl (RHSA-2021:1678)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1678 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: per...

CentOS 8 : perl (CESA-2021:1678)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1678 advisory. - perl: heap-based buffer overflow in regular expression compiler leads to DoS CVE-2020-10543 - perl: corruption of intermediate language state of...