SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2414-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new features were implemented : jscSLE-4875: CML New device IDs for CML jscSLE-7294: Add cpufreq driver for Raspberry Pi fate321840: Reduce memory required to boot capture kernel while using...

Debian DLA-1927-1 : qemu security update

Several vulnerabilities were found in QEMU, a fast processor emulator notably used in KVM and Xen HVM virtualization. CVE-2016-5126 Heap-based buffer overflow in the iscsiaioioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service QEMU process crash or...

EulerOS 2.0 SP5 : libpng (EulerOS-SA-2019-1975)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the pngsetunknownchunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to caus...

Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.145 and fixes at least the following security issues: There is heap-based buffer overflow in the marvell wifi chip driver that allows local users to cause a denial of servicesystem crash or possibly execute arbitrary code CVE-2019-14814,...

Debian: Security Advisory (DLA-1927-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for pango CESA-2019:2571 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pango security update

CentOS Errata and Security Advisory CESA-2019:2571 An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

EulerOS Virtualization for ARM 64 3.0.2.0 : bash (EulerOS-SA-2019-1942)

According to the version of the bash package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A heap-based buffer overflow was discovered in bash when wide characters, not supported by the current locale set in LCCTYPE...

EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2019-1857)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to...

CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

CVE-2019-16366

In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.c, as demonstrated by crafted JavaScript code to xst...

CVE-2019-16366

CVE-2019-16366 affects XS 9.0.0 in Moddable SDK OS180329. The issue is a heap-based buffer overflow in fxBeginHost (xsAPI.c) when invoked via fxRunDefine (xsRun.c). This is demonstrated by crafted JavaScript code to xst. The connected Red Hat/OSV entries corroborate the same description. Public e...

CVE-2019-16347

ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...

CVE-2019-16346

ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...

Heap overflow

ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...

Heap overflow

ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfifload at jfif.c...

CVE-2019-16346

CVE-2019-16346 concerns ngiflib 0.4, where a heap-based buffer overflow occurs in WritePixel() of ngiflib.c when invoked via DecodeGifImg. The root cause is described as mishandled deinterlacing for small pictures, leading to memory corruption. The available references document this vulnerability...

CVE-2019-16346

ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...

CVE-2019-16347

ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...