SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2018:3640-2)

This update for libarchive fixes the following issues : CVE-2016-10209: The archivewstringappendfrommbs function in archivestring.c allowed remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. bsc1032089 CVE-2016-10349: The...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

CVE-2018-19839 affects LibSass prior to 3.5.5. The vulnerability is a heap-based buffer over-read in Sass::handle_error (sass_context.cpp) that attackers can trigger via a crafted Sass file, causing a denial-of-service. Public details in the initial document confirm the exact function and file, t...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer over-read in the function Exiv2::IptcData::printStructure in src/iptc.cpp allows a remote attacker to cause a denial of service condition...

PT-2018-15123

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description The issue allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file. This is due to the function handle error in sass context.cpp...

CVE-2018-19839: Out-of-bounds Read

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19758

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...

CVE-2018-19756

There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19756

There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19759

There is a heap-based buffer over-read at stbimagewrite.h function: stbiwritepngtomem in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19756

CVE-2018-19756 affects libsixel 1.8.2 and is tied to a heap-based buffer over-read in stb_image.h (stbi__tga_load), leading to denial of service. The connected documents identify Libsixel vulnerabilities across multiple versions, notably 1.8.2, with remediation guidance to update to newer release...

CVE-2018-19759

There is a heap-based buffer over-read at stbimagewrite.h function: stbiwritepngtomem in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19759

CVE-2018-19759 affects libsixel 1.8.2 with a heap-based buffer over-read in stb_image_write.h (stbi_write_png_to_mem) that can cause denial of service. Red Hat notes the same issue. Red team sources (PT Security) indicate the vulnerability exists in libsixel prior to 1.8.3 and advise updating to ...

CVE-2018-19758

CVE-2018-19758 affects libsndfile 1.0.28 with a heap-based buffer over-read in wav.c: wav_write_header, leading to denial of service. Multiple advisories indicate a fix is available via upgraded libsndfile packages (examples: Debian/ Mageia advisories citing updates to address this issue; Mariner...

CVE-2018-19763

There is a heap-based buffer over-read at writer.c function: writepngtofile in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19758

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...

CVE-2018-19758: Out-of-bounds Read

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...