Huawei EulerOS: Security Advisory for soundtouch (EulerOS-SA-2021-2449)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : poppler (EulerOS-SA-2021-2425)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : GD library vulnerabilities (USN-5068-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5068-1 advisory. It was discovered that GD Graphics Library incorrectly handled certain GD and GD2 files. An attacker could possibly use this issu...

CVE-2020-19751

An issue was discovered in gpac 0.8.0. The gfodfdelipmptool function in odfcode.c has a heap-based buffer over-read...

CVE-2020-19751

An issue was discovered in gpac 0.8.0. The gfodfdelipmptool function in odfcode.c has a heap-based buffer over-read...

Heap overflow

An issue was discovered in gpac 0.8.0. The gfodfdelipmptool function in odfcode.c has a heap-based buffer over-read...

CVE-2020-19751

An issue was discovered in gpac 0.8.0. The gfodfdelipmptool function in odfcode.c has a heap-based buffer over-read...

Debian DLA-2748-1 : tnef - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2748 advisory. - In tnef before 1.4.18, an attacker may be able to write to the victim's .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef...

CVE-2020-18778

CVE-2020-18778 describes a heap-based buffer over-read in Libav 12.3, specifically in vc1_decode_p_mb_intfi of vc1_block.c. This flaw can allow a denial-of-service when processing a crafted VC-1 file. The available sources consistently identify the affected component and the nature of the vulnera...

Information Disclosure

hdf5 is vulnerable to information disclosure. The vulnerability exists due to a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

CVE-2020-19609

CVE-2020-19609 affects Artifex MuPDF: a heap-based buffer overwrite in tiff_expand_colormap() when parsing TIFF files can cause denial of service. The vulnerability is present in MuPDF before 1.18.0. OpenSUSE/OpenSUSE-SU-2021:1341-1 and Debian/DLA-2765-1 reference this issue alongside CVE-2020-16...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2021-2135)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

freetype is vulnerable to denial of service. A heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c allows an attacker to crash the application...

CVE-2021-36087

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmapmatchany called indirectly from cilcheckneverallow. This occurs because there is sometimes a lack of checks for invalid statements in an optional block...

CVE-2019-25048

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in doprintex called from asn1itemprintctx and ASN1itemprint...

CVE-2019-25048

Mode C: CVE-2019-25048 affects LibreSSL versions 2.9.1–3.2.1. The vulnerability is a heap-based buffer over-read in do_print_ex, triggered via asn1_item_print_ctx and ASN1_item_print. CVSS data (NVD) indicates a local, low-complexity exploit with no authentication required; potential high impact ...

CVE-2021-36087

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmapmatchany called indirectly from cilcheckneverallow. This occurs because there is sometimes a lack of checks for invalid statements in an optional block...

SUSE SLED12: libsolv-devel / libsolv-tools / libzypp / libzypp-devel / etc (SUSE-SU-2021:2180-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2180-1 advisory. Security issues fixed: - CVE-2019-20387: Fixed heap-buffer-overflow in repodataschema2id bsc1161510 - CVE-2021-3200:...

Updated leptonica packages fix security vulnerabilities

Leptonica before 1.80.0 allows a denial of service application crash via an incorrect left shift in pixConvert2To8 in pixconv.c CVE-2020-36277. Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c CVE-2020-36278. Leptonica before 1.80.0 allows a heap-bas...

Medium: glibc

Issue Overview: In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. CVE-2019-9169 A flaw was found in glibc. If an attacker provides the iconv function with invalid...