EulerOS Virtualization 3.0.1.0 : gdk-pixbuf2 (EulerOS-SA-2019-1438)

According to the versions of the gdk-pixbuf2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer overflow, leading to a heap-based buffer overflow, was found in the way gdk-pixbuf, an image loading library for...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1522)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - drivers/gpu/msm/kgsl.c in the MSM graphics driver aka GPU driver for the Linux kernel 3.x, as used in Qualcomm...

openSUSE Security Update : GraphicsMagick (openSUSE-2019-1354)

This update for GraphicsMagick fixes the following issues : Security issues fixed : - CVE-2019-11506: Fixed a heap-based buffer overflow in the function WriteMATLABImage boo1133498. - CVE-2019-11505: Fixed a heap-based buffer overflow in the function WritePDBImage boo1133501. The following fixes...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2019:1354-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PHP 7.1.x < 7.1.29 Heap-based Buffer Overflow Vulnerability.

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.29. It is, therefore, affected by a heap-based buffer over-read condition within estrndup of the exifprocessIFDTAG in the exif.c script. An unauthenticated, remote attacker can exploit this, to caus...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2019:1355-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-11838

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njsarrayprototypesplice in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11839

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njsarrayprototypepush in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11839

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njsarrayprototypepush in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11839

CVE-2019-11839 affects the NGINX NJS component (njs up to 0.3.1). The vulnerability is a heap-based buffer overflow in Array.prototype.push after a resize, caused by mishandling the size in njs_array_expand (njs/njs_array.c). Red Hat and other sources confirm this is a year‑old entry, with common...

CVE-2019-11838

CVE-2019-11838 concerns njs (used in NGINX) up to version 0.3.1, with a heap-based buffer overflow in Array.prototype.splice after a resize. The root cause is reported as mishandling the size in njs_array_expand, affecting njs_array_prototype_splice in njs/njs_array.c. Documents consistently desc...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1355-1 Rating: moderate References: 1132053 1132054 1133202 1133203 1133498 1133501 Cross-References: CVE-2019-11008 CVE-2019-11009 CVE-2019-11473 CVE-2019-11474 CVE-2019-11505 CVE-2019-11506 Affected...

openSUSE Security Update : ntfs-3g_ntfsprogs (openSUSE-2019-1313)

This update for ntfs-3gntfsprogs fixes the following issues : Security issues fixed : - CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation bsc1130165. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : ntfs-3g_ntfsprogs (openSUSE-2019-1314)

This update for ntfs-3gntfsprogs fixes the following issues : Security issues fixed : - CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation bsc1130165. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable...

CVE-2018-16717

A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox...

Arbitrary Code Execution And Denial Of Service

OpenJPEG is vulnerable to arbitrary code execution and denial of service attacks. A remote unauthenticated attacker could cause application crash or potential code execution due to a heap-based buffer overflow flaw via a specifically crafted j2k image...

Heap-Based Buffer Overflow

Linux kernel is vulnerable to heap-based buffer overflow vulnerability. This vulnerability occurs if 'MAXSKBFRAGS + 1' parameter and 'NETIFFFRAGLIST' feature are both used together. A remote user or process could use this flaw to potentially escalate their privilege on a system...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to heap-based buffer overflow writes. This vulnerability exists in "lz4::decompress" in Graphite2 library. An attacker could exploit this issue to cause a crash or, possibly, execute arbitrary code...

Denial Of Service (DoS)

JasPer is vulnerable to denial of serviceDoS attacks. A user can exploit a flaw in the jpcdectiledecode function in jpcdec.c which allows a remote attacker to have unspecified impact via a crafted image file. This leads to heap-based-buffer overflow that may result in application crash...

Heap-Based Buffer Overflow

Quick Emulator Qemu is vulnerable to heap-based buffer overflow. This occurs while copying VGA data via various bitblt functions. A remote user could use this flaw to crash the QEMU process or execute arbitrary code on the host which may leads to denial of service...