11055 matches found
Low: Red Hat Security Advisory: virt:rhel security, bug fix, and enhancement update
An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
LEADTOOLS JPEG2000 j2pc Parsing Remote Code Execution Vulnerability
Summary An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this...
Fedora 31 : file (2019-554c3c691f)
fix heap-based buffer overflow in cdfreadpropertyinfo CVE-2019-18218 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 30 : file (2019-97dcb2762a)
fix heap-based buffer overflow in cdfreadpropertyinfo CVE-2019-18218 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2018-19931
An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not restricted...
Heap overflow
MiniDLNA has heap-based buffer overflow...
CVE-2013-2739
MiniDLNA has heap-based buffer overflow...
openSUSE: Security Advisory for lz4 (openSUSE-SU-2019:2398-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : lz4 (openSUSE-2019-2399)
This update for lz4 fixes the following issues : - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4write32 bsc1153936. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
openSUSE Security Update : lz4 (openSUSE-2019-2398)
This update for lz4 fixes the following issues : - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4write32 bsc1153936. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
OPENSUSE-SU-2019:2398-1 Security update for lz4
This update for lz4 fixes the following issues: - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4write32 bsc1153936. This update was imported from the SUSE:SLE-15:Update update project...
Security update for lz4 (moderate)
openSUSE Security Update: Security update for lz4 Announcement ID: openSUSE-SU-2019:2398-1 Rating: moderate References: 1153936 Cross-References: CVE-2019-17543 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for lz4 fixes th...
SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2019:2780-1)
This update for binutils fixes the following issues : binutils was updated to current 2.32 branch jscECO-368. Includes following security fixes : CVE-2018-17358: Fixed invalid memory access in bfdstabsectionfindnearestline in syms.c bsc1109412 CVE-2018-17359: Fixed invalid memory access exists in...
CVE-2019-17546
tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...
Amazon Linux 2 : SDL2 (ALAS-2019-1318)
An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9. There is an out-of-bounds read in the function SDLInvalidateMap at video/SDLpixels.c.CVE-2019-12222 A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing...
CVE-2019-17543
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call LZ4compressfast with a large input. This issue can also lead to data corruption. NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."...
CVE-2019-18218
cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...
Debian DLA-1969-1 : file security update
An issue has been found in file, a tool to determine file types by using magic numbers. The number of CDFVECTOR elements had to be restricted in order to prevent a heap-based buffer overflow 4-byte out-of-bounds write. For Debian 8 'Jessie', this problem has been fixed in version...
[SECURITY] [DLA 1969-1] file security update
Package : file Version : 1:5.22+15-2+deb8u6 CVE ID : CVE-2019-18218 An issue has been found in file, a tool to determine file types by using magic numbers. The number of CDFVECTOR elements had to be restricted in order to prevent a heap-based buffer overflow 4-byte out-of-bounds write. For Debian...