11055 matches found
Amazon Linux 2 : file (ALAS-2019-1370)
cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write.CVE-2019-18218 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Amazon Linux 2 : SDL (ALAS-2019-1375)
A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulnerable to this flaw, which could allow an attacker to ma...
EulerOS 2.0 SP3 : dosfstools (EulerOS-SA-2019-2570)
According to the versions of the dosfstools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The readboot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service crash via a crafted filesystem, which...
CVE-2019-18391
A heap-based buffer overflow flaw was found in virglrenderer. The vrendrenderertransferwriteiov function allows guest OS users to cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
EulerOS 2.0 SP3 : giflib (EulerOS-SA-2019-2587)
According to the versions of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service program crash via crafted image an...
EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2019-2639)
According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an...
EulerOS 2.0 SP3 : zziplib (EulerOS-SA-2019-2685)
According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function zzipparserootdirectory in zip.c, which will...
EulerOS 2.0 SP3 : lz4 (EulerOS-SA-2019-2630)
According to the version of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a...
EulerOS 2.0 SP3 : gpgme (EulerOS-SA-2019-2591)
According to the version of the gpgme package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote...
EulerOS 2.0 SP3 : ghostscript (EulerOS-SA-2019-2586)
According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive informati...
RHEL 7 : openslp (RHSA-2019:4240)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4240 advisory. OpenSLP is an open source implementation of the Service Location Protocol SLP which is an Internet Engineering Task Force IETF standards track protoc...
EulerOS 2.0 SP3 : ppp (EulerOS-SA-2019-2652)
According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the getword function in options.c in pppd in Paul's PPP Package ppp before 2.4.7 allows attackers to 'access privileged options' vi...
EulerOS 2.0 SP3 : tcpdump (EulerOS-SA-2019-2674)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - tcpdump 4.9.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packet data. Th...
Heap-Based Buffer Overflow
tensorflow is vulnerable to heap-based buffer overflow. An out-of-bounds heap memory access occurs in UnsortedSegmentSum when the Index template argument is int32 and truncation from int64 to int32 can produce negative numbers. The vulnerability, however, is unlikely to be vulnerable...
Scientific Linux Security Update : openslp on SL7.x x86_64 (20191216)
Security Fixes : - openslp: Heap-based buffer overflow in ProcessSrvRqst in slpdprocess.c leading to remote code execution CVE-2019-5544 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid132085; scriptversion"1.7";...
openslp security update
1:2.0.0-8 - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: 1781701...
CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
