14882 matches found
CVE-2018-20230
CVE-2018-20230 affects PSPP 1.2.0 due to a heap-based buffer overflow in read_bytes_internal (utilities/pspp-dump-sav.c). Impact per the entry: denial of service via application crash and possible unspecified other effects. The connected records also reference CVE-2022-39831 affecting PSPP 1.6.2 ...
CVE-2018-20230
An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...
CVE-2018-20096
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
CVE-2018-20098
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
CVE-2018-20184
In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...
CVE-2018-20185
In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...
CVE-2018-20184
In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...
CVE-2018-20185
In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...
CVE-2018-20184
GraphicsMagick 1.4 snapshot-20181209 Q8 contains a heap-based buffer overflow in the WriteTGAImage function (tga.c) when processing TGA files. The overflow arises because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA spec, enabling a crafted image to trigger...
CVE-2018-20185
GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit hosts is affected by a heap-based buffer over-read in ReadBMPImage (bmp.c) that can cause denial of service when processing crafted BMP files, limited to installations with customized BMP limits. Public advisories reference patches: Debian fixes 1...
CVE-2018-20184
In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...
Security Bulletin: Vulnerabilities in curl affect PowerKVM
Summary PowerKVM is affected by vulnerabilities in curl. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000301 DESCRIPTION: curl is vulnerable to a denial of service, caused by heap-based buffer over-read. By sending a specially crafted RTSP response, a remote...
SUSE SLES11 Security Update : tiff (SUSE-SU-2018:4120-1)
This update for tiff fixes the following issues : Security issues fixed : CVE-2016-10094: Fixed heap-based buffer overflow in the tiffWriteProc function bsc1017693. CVE-2016-10093: Fixed heap-based buffer overflow in the TIFFmemcpy function bsc1017693. CVE-2016-10092: Fixed heap-based buffer...
CVE-2018-19540
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0....
CVE-2018-19541
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0....
PYSEC-2018-117
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...
EulerOS 2.0 SP3 : libcdio (EulerOS-SA-2018-1390)
According to the versions of the libcdio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libcdio: Heap-based buffer over-read in printiso9660recurse function in iso-info.c CVE-2017-18198 - libcdio: NULL pointer dereference in...
openSUSE Security Update : tiff (openSUSE-2018-1522)
This update for tiff fixes the following issues : Security issues fixed : - CVE-2018-19210: Fixed NULL pointer dereference in the TIFFWriteDirectorySec function bsc1115717. - CVE-2017-12944: Fixed denial of service issue in the TIFFReadDirEntryArray function bsc1054594. - CVE-2016-10094: Fixed...
SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2018:3640-2)
This update for libarchive fixes the following issues : CVE-2016-10209: The archivewstringappendfrommbs function in archivestring.c allowed remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. bsc1032089 CVE-2016-10349: The...