openSUSE: Security Advisory for exiv2 (openSUSE-SU-2018:1961-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for unzip (openSUSE-SU-2018:1914-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for tiff (openSUSE-SU-2018:3370-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-3199-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for opencv (openSUSE-SU-2018:1697-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 6 : chromium-browser (RHSA-2018:3004)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:3004 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 70.0.3538.67. Security Fixes:...

Security update for tiff (moderate)

This update for tiff fixes the following issues: Security issue fixed: - CVE-2018-10779: TIFFWriteScanline in tifwrite.c had a heap-based buffer over-read, as demonstrated by bmp2tiff.bsc1092480 - CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denia...

SUSE SLED12 Security Update : libraw (SUSE-SU-2018:3343-1)

This update for libraw fixes the following issues : Security issues fixed : CVE-2018-5800: Fixed heap-based buffer overflow in LibRaw::kodakycbcrloadraw function bsc1084691. CVE-2018-5801: Fixed NULL pointer dereference in LibRaw::unpack function bsc1084690. CVE-2018-5802: Fixed out-of-bounds rea...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:3289-1)

This update for tiff fixes the following issues : CVE-2018-17100: There is a int32 overflow in multiplyms in tools/ppm2tiff.c, which can cause a denial of service crash or possibly have unspecified other impact via a crafted image file. bsc1108637 CVE-2018-17101: There are two out-of-bounds write...

CVE-2018-18583

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap...

Heap overflow

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette...

CVE-2018-18582

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette...

CVE-2018-18582

CVE-2018-18582 affects LuPng (through 2017-03-10). The issue is a heap-based buffer overflow in insertByte within miniz/lupng.c during a write operation using data from a palette. Multiple sources (CNVD-2019-09763, NVD/NVD mirror, PRION) describe this as a heap overflow in LuPng’s PNG decoding/en...

CVE-2018-18581

LuPng (miniz/lupng.c) contains a heap-based buffer over-read in internalPrintf, present in LuPng up to 2017-03-10. Multiple sources (CNVD-2019-09762, NVD CVE-2018-18581 listings, CVE records, and CVELIST) describe a heap over-read in internalPrintf of LuPng’s miniz/lupng.c, with potential for arb...

CVE-2018-18583

Summary: CVE-2018-18583 affects LuPng (miniz/lupng.c). A heap-based buffer overflow occurs in the function insertByte during a write operation for data sourced from a swap, reported for LuPng up to 2017-03-10. Related records (CNVD-2019-09764) describe that this vulnerability can be exploited to ...

SUSE SLES12 Security Update : icu (SUSE-SU-2018:1401-2)

icu was updated to fix two security issues. These security issues were fixed : CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:2973-2) (Spectre)

This update for qemu fixes the following security issues : CVE-2018-12617: qmpguestfileread had an integer overflow that could have been exploited by sending a crafted QMP command including guest-file-read with a large count value to the agent via the listening socket causing DoS bsc1098735...

Debian: Security Advisory (DLA-1551-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...

MGASA-2018-0409 Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file CVE-2016-5319. In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tifpackbits.c CVE-2017-17942. TIFFWriteScanlin...