Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists as through a heap-based buffer overflow in the AcquireCacheNexus function in magick/pixelcache.c...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. The vulnerability exists a heap-based buffer over-read exists in DemuxInit in demux/asf/asf.c...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A heap-based buffer over-read in bfdgetl32 in libbfd.c allows an attacker to crash the application via a malicious PE file...

Denial Of Service (DoS)

chromium-browser:focal is vulnerable to denial of service DoS. Heap-based buffer overflow in j2k.c in OpenJPEG allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...

Information Disclosure

binutils is vulnerable to information disclosure. A heap-based buffer overflow from an integer overflow in the function simpleobjectelfmatch in simple-object-elf.c allows an attacker to obtain arbitrary data from memory. This is due to a lack of check for a zero shstrndx value...

Denial Of Service (DoS)

binutils:bionic is vulnerable to denial of service DoS. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils. There is a heap-based buffer over-read in bfddoprnt in bfd.c because elfobjectp in elfcode.h mishandles an eshstrndx section of typ...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, when LocaleNCompare reads heap data beyond the allocated region...

Arbtirary Code Execution

GIMP is vulnerable to arbitrary code execution. A heap-based buffer over-read in the function readcreatorblock in plug-ins/common/file-psp.c allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow in processmipsspecific in readelf.c via a malformed MIPS option section...

openSUSE Security Update : libjpeg-turbo (openSUSE-2020-1458)

This update for libjpeg-turbo fixes the following issues : - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks...

OPENSUSE-SU-2020:1458-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2020:1458-1 Rating: moderate References: 1172491 Cross-References: CVE-2020-13790 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

openSUSE Security Update : libjpeg-turbo (openSUSE-2020-1413)

This update for libjpeg-turbo fixes the following issues : - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2020:1413-1 Rating: moderate References: 1172491 Cross-References: CVE-2020-13790 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Oracle Linux 8 : php:7.3 (ELSA-2020-3662)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3662 advisory. php 7.3.20-1 - update to 7.3.20 1856655 php-pear 1:1.10.9-1 - update PEAR to 1.10.9 - update ArchiveTar to 1.4.7 - update ConsoleGetopt to 1.4.2 Tenabl...

SUSE SLES12 Security Update : libjpeg-turbo (SUSE-SU-2020:2570-1)

This update for libjpeg-turbo fixes the following issues : CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE-SU-2020:2569-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file bsc1172491...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2020-1963)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : virglrenderer (EulerOS-SA-2020-1970)

According to the versions of the virglrenderer package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in virglrenderer. The vrendrenderertransferwriteiov function allows...