(0Day) Wecon LeviStudioU screendata Desc FigureFile Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Wecon LeviStudioU. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

Security update for libraw (moderate)

openSUSE Security Update: Security update for libraw Announcement ID: openSUSE-SU-2019:0094-1 Rating: moderate References: 1120498 1120499 1120500 1120515 1120516 1120517 1120519 Cross-References: CVE-2018-20337 CVE-2018-20363 CVE-2018-20364 CVE-2018-20365 CVE-2018-5817 CVE-2018-5818 CVE-2018-581...

CVE-2019-6977

gdImageColorMatch in gdcolormatch.c in the GD Graphics Library aka LibGD 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigg...

Amazon Linux 2 : keepalived (ALAS-2019-1154)

Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server allows malicious web server or man-in-the-middle attacker pretending to be a web server to cause either a denial of service or potentially execute arbitrary...

PHP 7.2.x < 7.2.14 Multiple vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.14. It is, therefore, affected by multiple vulnerabilities: - An integer underflow condition exists in gdContributionsAlloc function in gdinterpolation.c. An unauthenticated, remote attacker can hav...

SUSE SLED12 Security Update : libraw (SUSE-SU-2019:0127-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of librawcxx.cpp bsc1120500 CVE-2018-20364: Fixed a NULL pointer dereference in the copybayer function of librawcxx.cpp bsc1120499 CVE-2018-2036...

openSUSE Security Update : podofo (openSUSE-2019-66)

This update for podofo version 0.9.6 fixes the following issues : Security issues fixed : - CVE-2017-5852: Fix a infinite loop in PoDoFo::PdfPage::GetInheritedKeyFromObject PdfPage.cpp boo1023067 - CVE-2017-5854: Fix a NULL pointer dereference in PdfOutputStream.cpp boo1023070 - CVE-2017-5886: Fi...

CVE-2019-6439

examples/benchmark/tlsbench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow...

CVE-2019-6439

examples/benchmark/tlsbench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. A heap-based buffer overflow occurs in the Slirp networking back-end when reassembling fragmented datagrams. A privileged user/process inside guest could use this flaw to crash the QEMU process resulting in DoS or potentially leverage it to execute arbitra...

Denial Of Service (DoS)

rh-perl524-perl is vulnerable to denial of service DoS attacks. The vulnerability exists as an issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written...

Remote Code Execution (RCE)

github.com/kubernetes/dns leverages the dnsmasq library which is vulnerable to a heap-based buffer overflow. An attacker could cause a denial of service or execute arbitrary code via crafted DNS response. This issue in dnsmasq has been assigned CVE-2017-14491...

Arbitrary Code Execution

rh-mariadb100-mariadb is vulnerable to arbitrary code execution attacks. The vulnerability exists as a heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by...

Arbitrary Code Execution

grep is vulnerable to arbitrary code execution attacks. The vulnerability exists through multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a long input line that triggers a heap-based buffer overflow...

Denial Of Service (DoS)

php is vulnerable to denial of service. A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time. An integer overflow flaw leading to a heap-based buffer overflow was found in the way PHP's FTP extensio...

Arbitrary Code Execution

glibc is vulnerable to arbitrary code execution attacks. The vulnerability exists as a heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1...

Privilege Escalation

libXfont.so is vulnerable to privilege escalation. An integer overflow bug in FontFileAddEntry and lexAlias allows a local attacker to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which results in a heap-based buffer overflow...

Denial Of Service (DoS)

libvncserver is vulnerable to denial of service DoS attacks. The vulnerability exists as an integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service crash and possibly execute arbitrary code via an...

Denial Of Service (DoS)

perl is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service...

Denial Of Service (DoS)

gegl is vulnerable to denial of service DoS attacks. The vulnerability exists as multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large...