NewStart CGSL CORE 5.05 / MAIN 5.05 : poppler Multiple Vulnerabilities (NS-SA-2020-0110)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has poppler packages installed that are affected by multiple vulnerabilities: - An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:3582-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908. No...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:3588-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908. No...

NewStart CGSL CORE 5.05 / MAIN 5.05 : openjpeg2 Multiple Vulnerabilities (NS-SA-2020-0099)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has openjpeg2 packages installed that are affected by multiple vulnerabilities: - OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimension...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:3587-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908. No...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:3585-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908. No...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:3586-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908. No...

SUSE SLES12 Security Update : taglib (SUSE-SU-2020:2968-1)

This update for taglib fixes the following issues : CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function allowed remote attackers to cause information disclosure heap-based buffer over-read via a crafted audio file bsc1096180. Note that Tenable Network Security has extracted the preceding...

Integer Overflow

Google Chrome is vulnerable to integer overflows.A remote attacker could potentially cause heap based buffer overflows via a crafted HTML page...

Information Disclosure

SQLite is vulnerable to information disclosure. An attacker could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c leading to a disclosure of sensitive information...

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution allows an attacker to crash the application and cause other unspecified impact...

Arbitrary Code Execution

optipng is vulnerable to arbitrary code execution. A heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c remote attackers to execute arbitrary code on the host OS...

Denial Of Service (DoS)

Sound eXchange is vulnerable to denial of service attacks. A heap-based buffer overflow in the ImaExpandS function of imarw.c could lead to a denial of service attack during conversion of an audio file...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c allows an attacker to crash the application via a malicious MP4 file...

Integer Overflow

FuseISO is vulnerable to integer overflow. The vulnerability might allow remote attackers to cause a denial of service via a large ZF block size in an ISO file, leading to a heap-based buffer overflow...

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. The vulnerability existed because it contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

Denial Of Service (DoS)

opensc is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow in scoberthurreadfile...

CVE-2020-6017

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...

CVE-2020-6017

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...

Heap overflow

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...