2139 matches found
CVE-2018-20570
jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read...
SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0114-1) (BEAST) (httpoxy)
This update for python3 to version 3.6.10 fixes the following issues : CVE-2017-18207: Fixed a denial of service in Waveread.readfmtchunk bsc1083507. CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ bsc1149955. CVE-2019-15903: Fixed a heap-based buffer over-read in...
EulerOS Virtualization for ARM 64 3.0.5.0 : libsndfile (EulerOS-SA-2020-1066)
According to the versions of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of...
EulerOS Virtualization for ARM 64 3.0.5.0 : binutils (EulerOS-SA-2020-1074)
According to the versions of the binutils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service,...
EulerOS Virtualization for ARM 64 3.0.5.0 : ncurses (EulerOS-SA-2020-1064)
According to the versions of the ncurses packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurse...
EulerOS Virtualization for ARM 64 3.0.5.0 : expat (EulerOS-SA-2020-1075)
According to the version of the expat packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too...
Updated oniguruma packages fix security vulnerabilities
Updated oniguruma packages fix security vulnerabilities: A use-after-free in onignewdeluxe in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a...
CVE-2020-6628
CVE-2020-6628 affects Ming (libming) 0.4.8. The vulnerability is a heap-based over-read in decompile_SWITCH() within decompile.c, exposing memory and potentially compromising confidentiality, integrity, and availability. Exploitation details are not provided in the supplied documents. No patch/re...
CVE-2020-6625
CVE-2020-6625 affects the jhead tool (up to and including version 3.04). The vulnerability is a heap-based buffer over-read in Get32s invoked from ProcessGpsInfo in gpsinfo.c, which can lead to partial confidentiality/availability impact as per CVSS. Public advisories indicate multiple vendors/de...
CVE-2020-6624
CVE-2020-6624 affects jhead up to version 3.04, with a heap-based buffer over-read in process_DQT (jpgqguess.c). Public advisories confirm impact on multiple distros and urge upgrading to newer jhead releases to mitigate. Debian/OpenSUSE/Gentoo/GNU/Linux advisories reference fixes; Mageia advises...
openSUSE: Security Advisory for expat (openSUSE-SU-2019:2205-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
AIX 7.2 TL 2 : tcpdump (IJ20784)
https://vulners.com/cve/CVE-2018-14467 https://vulners.com/cve/CVE-2018-14467 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP. The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint. The LMP parser in...
CVE-2020-6620
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8...
CVE-2020-6622
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
Heap overflow
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...
Heap overflow
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...
CVE-2020-6618
Removed by vendor...
CVE-2020-6621
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT...
