Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadRGBImage of coders/rgb.c...

Denial Of Service (DoS)

The checksysvhash function in elflint.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

Denial Of Service (DoS)

Artifex jbig2dec is vulnerable to denial of service. A heap-based buffer over-read in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a allows an attacker to crash the application via a malicious .jb2 file...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in the ImportGrayQuantumType function, through ReadGRAYImage in coders/gray.c...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A heap-based buffer over-read in bfdgetl32 in libbfd.c allows an attacker to crash the application via a malicious PE file...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, when LocaleNCompare reads heap data beyond the allocated region...

Arbtirary Code Execution

GIMP is vulnerable to arbitrary code execution. A heap-based buffer over-read in the function readcreatorblock in plug-ins/common/file-psp.c allows an attacker to execute arbitrary code on the host OS...

openSUSE Security Update : libjpeg-turbo (openSUSE-2020-1458)

This update for libjpeg-turbo fixes the following issues : - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks...

OPENSUSE-SU-2020:1458-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2020:1458-1 Rating: moderate References: 1172491 Cross-References: CVE-2020-13790 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

Oracle Linux 8 : php:7.3 (ELSA-2020-3662)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3662 advisory. php 7.3.20-1 - update to 7.3.20 1856655 php-pear 1:1.10.9-1 - update PEAR to 1.10.9 - update ArchiveTar to 1.4.7 - update ConsoleGetopt to 1.4.2 Tenabl...

SUSE SLES12 Security Update : libjpeg-turbo (SUSE-SU-2020:2570-1)

This update for libjpeg-turbo fixes the following issues : CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE-SU-2020:2569-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491...

EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2020-1949)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malforme...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2020-1949)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-25054

An issue was discovered on Samsung mobile devices with software through 2020-04-02 Exynos modem chipsets. There is a heap-based buffer over-read in the Shannon baseband. The Samsung ID is SVE-2020-17239 August 2020...

Debian DLA-2354-1 : ndpi security update

An issue has been found in ndpi, an extensible deep packet inspection library. The Oracle protocol dissector contains an heap-based buffer over-read, which could crash the application that uses this library and may result in denial of service. For Debian 9 stretch, this problem has been fixed in...

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2020-1901)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2020-1910)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed P...