Security update for tiff (moderate)

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. - CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. - CVE-2016-10094: Fixed...

openSUSE: Security Advisory for ovmf (openSUSE-SU-2018:4254-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for ovmf (moderate)

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. - CVE-2017-5732: Fixed...

CVE-2018-20365

CVE-2018-20365: LibRaw::raw2image() in libraw_cxx.cpp has a heap-based buffer overflow. Public advisories list LibRaw as affected and note patches; Debian DLA-2903-1 specifies LibRaw fixes up to 0.17.2-6+deb9u2, and Ubuntu/Security advisories include CVE-2018-20365 among LibRaw vulnerabilities. N...

CVE-2018-20365

LibRaw::raw2image in librawcxx.cpp has a heap-based buffer overflow...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

Integer overflow

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-20330

The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image because multiplication of pitch and height is mishandled, as demonstrated by tjbench...

CVE-2018-5200

CVE-2018-5200 relates to KMPlayer 4.2.2.15 and earlier, where a Heap Based Buffer Overflow occurs when processing crafted FLV data. The issue arises because more frame data is copied to heap memory than the size specified in the frame header, causing memory corruption and potential remote code ex...

CVE-2018-5200 KMPlayer Heap Overflow Vulnerability

KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:4191-1)

This update for tiff fixes the following issues : Security issues fixed : CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. CVE-2016-10094: Fixed heap-bas...

CVE-2018-20230

CVE-2018-20230 affects PSPP 1.2.0 due to a heap-based buffer overflow in read_bytes_internal (utilities/pspp-dump-sav.c). Impact per the entry: denial of service via application crash and possible unspecified other effects. The connected records also reference CVE-2022-39831 affecting PSPP 1.6.2 ...

CVE-2018-20230

An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

CVE-2018-20184

GraphicsMagick 1.4 snapshot-20181209 Q8 contains a heap-based buffer overflow in the WriteTGAImage function (tga.c) when processing TGA files. The overflow arises because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA spec, enabling a crafted image to trigger...