2139 matches found
CVE-2018-19758
There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...
CVE-2018-19759
CVE-2018-19759 affects libsixel 1.8.2 with a heap-based buffer over-read in stb_image_write.h (stbi_write_png_to_mem) that can cause denial of service. Red Hat notes the same issue. Red team sources (PT Security) indicate the vulnerability exists in libsixel prior to 1.8.3 and advise updating to ...
CVE-2018-19759
There is a heap-based buffer over-read at stbimagewrite.h function: stbiwritepngtomem in libsixel 1.8.2 that will cause a denial of service...
CVE-2018-19758
There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...
CVE-2018-19758
CVE-2018-19758 affects libsndfile 1.0.28 with a heap-based buffer over-read in wav.c: wav_write_header, leading to denial of service. Multiple advisories indicate a fix is available via upgraded libsndfile packages (examples: Debian/ Mageia advisories citing updates to address this issue; Mariner...
CVE-2018-19756
CVE-2018-19756 affects libsixel 1.8.2 and is tied to a heap-based buffer over-read in stb_image.h (stbi__tga_load), leading to denial of service. The connected documents identify Libsixel vulnerabilities across multiple versions, notably 1.8.2, with remediation guidance to update to newer release...
CVE-2018-19763
There is a heap-based buffer over-read at writer.c function: writepngtofile in libsixel 1.8.2 that will cause a denial of service...
[SECURITY] [DLA 1600-1] libarchive security update
Package : libarchive Version : 3.1.2-11+deb8u4 CVE ID : CVE-2015-8915 CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 CVE-2016-10209 CVE-2016-10349 CVE-2016-10350 CVE-2017-5601 CVE-2017-14166 CVE-2017-14501 CVE-2017-14502 CVE-2017-14503 Debian Bug : 853278 875960 875974 875966 874539 840934 840935 8616...
CVE-2018-19664
libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the putpixelrows function in wrbmp.c, as demonstrated by djpeg...
CVE-2018-19625
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...
CVE-2018-19625
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...
CVE-2018-19625
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...
CVE-2018-19625
In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuffcomposite.c by preventing a heap-based buffer over-read...
CVE-2018-19541
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0....
CVE-2018-19543
CVE-2018-19543 affects JasPer 2.0.14. The issue is a heap-based buffer over-read of size 8 in jp2_decode (libjasper/jp2/jp2_dec.c). Exploitation details, impact, affected platforms, and fixes are not provided beyond this description in the initial document. References to Jasper-related advisories...
CVE-2018-19535
Exiv2 0.26 and earlier are affected by CVE-2018-19535 due to a heap-based buffer over-read in PngChunk::readRawProfile (pngchunk_int.cpp), which can cause a denial of service (application crash) via a crafted PNG file. Connected documents corroborate the CVE entry and list Exiv2-related DoS/crash...
CVE-2018-19535
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...
Debian DLA-1574-1 : imagemagick security update
CVE-2018-18025 Fix for heap-based buffer over-read which can result in a denial of service via a crafted file. For Debian 8 'Jessie', this problem has been fixed in version 8:6.8.9.9-5+deb8u15. We recommend that you upgrade your imagemagick packages. NOTE: Tenable Network Security has extracted t...