CVE-2018-20536

There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF spatialreference.cpp in libLAS 1.8.1 that will cause a denial of service...

CVE-2018-20542

There is a heap-based buffer-overflow at generatorspgemmcscreader.c function libxsmmsparsecscreader in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 which is in a different part of the source code and is seen at a different address...

CVE-2018-20570

CVE-2018-20570 affects JasPer 2.0.14: jp2_encode in libjasper jp2_enc.c experiences a heap-based buffer over-read, with potential crash/denial of service (CVSS3: high availability impact; network exposure). Connected sources corroborate the vulnerability and list unpatched/affected environments i...

CVE-2018-20570

jp2encode in jp2/jp2enc.c in JasPer 2.0.14 has a heap-based buffer over-read...

CVE-2018-20552

Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c...

CVE-2018-20553

Tcpreplay before 4.3.1 has a heap-based buffer over-read in getl2len in common/get.c...

CVE-2018-20536

CVE-2018-20536 affects libLAS 1.8.1, involving a heap-based buffer over-read in liblas SpatialReference::GetGTIF() that can cause a denial of service. Public references in the provided documents show Fedora updates (liblas 1.8.1-5.fc31 and 1.8.1-5.fc32) addressing this and related CVEs, indicatin...

CVE-2018-20542

There is a heap-based buffer-overflow at generatorspgemmcscreader.c function libxsmmsparsecscreader in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 which is in a different part of the source code and is seen at a different address...

CVE-2018-20536

Removed by vendor...

CVE-2018-20541

There is a heap-based buffer overflow in libxsmmsparsecscreader at generatorspgemmcscreader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 which is in a different part of the source code and is seen at different addresses...

CVE-2018-20541

There is a heap-based buffer overflow in libxsmmsparsecscreader at generatorspgemmcscreader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 which is in a different part of the source code and is seen at different addresses...

EulerOS 2.0 SP2 : libcdio (EulerOS-SA-2018-1418)

According to the versions of the libcdio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libcdio: Heap-based buffer over-read in printiso9660recurse function in iso-info.c CVE-2017-18198 - libcdio: NULL pointer dereference in...

Debian DLA-1619-1 : graphicsmagick security update

Multiple vulnerabilities have been found in GraphicsMagick, the image processing system. CVE-2018-20184 The WriteTGAImage function tga.c is affected by a heap-based buffer overflow. Remote attackers might leverage this vulnerability to cause a denial of service via a crafted image file...

[SECURITY] [DLA 1619-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u5 CVE ID : CVE-2018-20184 CVE-2018-20185 CVE-2018-20189 Debian Bug : 916752 916719 916721 Multiple vulnerabilities have been found in GraphicsMagick, the image processing system. CVE-2018-20184 The WriteTGAImage function tga.c is affected by a...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20451

The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20451

The processfile function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20453

CVE-2018-20453 affects the libdoc library (getlong in numutils.c) with a heap-based buffer over-read in versions up to 2017-10-23. This can cause a denial of service (application crash) when parsing a crafted file. The connected documents corroborate the vulnerable component and impact; no patch/...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service application crash via a crafted file...