RHEL 7 : elfutils (RHSA-2019:2197)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2197 advisory. The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code. The...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS attack. The attack is due to a heap-based buffer over-read occured in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils when an attacker passes a malicious input file...

Buffer Overflows

elfutils is vulnerable to heap-based buffer over-read. It is possible in libdw/dwarfgetabbrev.c and libwd/dwarfhasattr.c, leading to an application crash...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. It causes a heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges via a malicious file...

Denial Of Service (Dos)

libjpeg-turbo is vulnerable to denial of service. A heap-based buffer over-read in the function get8bitrow in rdbmp.c allows an attacker to cause a denial of service using a malicious 80-bit BMP...

Low: Red Hat Security Advisory: elfutils security, bug fix, and enhancement update

An update for elfutils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

Heap overflow

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

PYSEC-2019-245

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14373

CVE-2019-14373 affects Free Lossless Image Format (FLIF) 0.3, where the crash is triggered in image_save_png (image/image-png.cpp) leading to a heap-based buffer over-read via a crafted FLIF file. The vulnerability arises from improper data boundary handling during processing, as described in mul...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() (rafimage.cpp). The CVE-2019-14368 entry is corroborated across NVD, Red Hat/SUSE advisories, and CNVD; exploitation details, affected products/versions beyond 0.27.99.0 are not provided in the connected document...

PT-2019-20117

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue allows attackers to cause a denial of service, specifically a heap-based buffer over-read, by utilizing a crafted image file. This is related to the Exiv2::PngImage::readMetadata function in the...