SUSE: Security Advisory (SUSE-SU-2021:14598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-pa / qemu-block-curl / etc (SUSE-SU-2021:1893-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1893-1 advisory. - CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA bsc1176681 - CVE-2020-10756: Fix out-of-bounds read...

SUSE: Security Advisory (SUSE-SU-2012:1391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : libwebp (ELSA-2021-2260)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2260 advisory. 0.3.0-10 - Added fixes for rhbz1956829, rhbz1956843, rhbz1956919 Tenable has extracted the preceding description block directly from the Oracle Linux...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow in apngdoinverseblend in libavcodec/pngenc.c...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow in libavfilter/vfyadif.c...

Important: Red Hat Security Advisory: libwebp security update

An update for libwebp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 7 : libwebp (RHSA-2021:2260)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2260 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...

Debian DLA-2677-1 : libwebp security update

Multiple security issues have been discovered in libwebp CVE-2018-25009 An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability. CVE-2018-25010 An out-of-bounds read was found in...

Debian: Security Advisory (DLA-2677-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow in libavfilter/vfcolorconstancy.c in slicegetderivative...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow libavfilter/afafade.c in crossfadesamplesfltp...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow in libavfilter/vfw3fdif.c in filter16complexlow...

Denial Of Service (DoS)

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-base buffer overflow in deflate16 at libavfilter/vfneighbor.c...

Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. A heap-based buffer overflow in gaussianblur in libavfilter/vfedgedetect.c allows an attacker to execute arbitrary code on the host OS...

CVE-2020-22022

ffmpeg is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow. in filterframe at libavfilter/vffieldorder.c...

Unspecified Vulnerability in Cesanta Mongoose

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A security vulnerability exists in Cesanta MongooseOS mJS 1.26, which stems from a maliciously formed JSON string that c...

SUSE SLES12 Security Update : libwebp (SUSE-SU-2021:1830-1)

This update for libwebp fixes the following issues : CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign bsc1185691. CVE-2020-36332: Fixed extreme memory allocation when reading a file bsc1185674...

OpenText Brava! Desktop DWF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

PT-2021-19366 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...