14923 matches found
Updated ming packages fix security vulnerabilities
The updated packages fix security vulnerabilities: A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. CVE-2018-7866 There is a heap-based buffer overflow ...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in PHP (CVE-2019-6977) (CVE-2019-6978)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in PHP Vulnerability Details CVEID: CVE-2019-6978 DESCRIPTION: The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP ...
CVE-2020-6624
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...
Heap overflow
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c...
CVE-2020-6628
CVE-2020-6628 affects Ming (libming) 0.4.8. The vulnerability is a heap-based over-read in decompile_SWITCH() within decompile.c, exposing memory and potentially compromising confidentiality, integrity, and availability. Exploitation details are not provided in the supplied documents. No patch/re...
CVE-2020-6628
Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...
CVE-2020-6625
CVE-2020-6625 affects the jhead tool (up to and including version 3.04). The vulnerability is a heap-based buffer over-read in Get32s invoked from ProcessGpsInfo in gpsinfo.c, which can lead to partial confidentiality/availability impact as per CVSS. Public advisories indicate multiple vendors/de...
CVE-2020-6624
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...
Amazon Linux 2 : nss-softokn (ALAS-2020-1379)
The version of nss-softokn installed on the remote host is prior to 3.44.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1379 advisory. Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized befor...
CVE-2020-6624
CVE-2020-6624 affects jhead up to version 3.04, with a heap-based buffer over-read in process_DQT (jpgqguess.c). Public advisories confirm impact on multiple distros and urge upgrading to newer jhead releases to mitigate. Debian/OpenSUSE/Gentoo/GNU/Linux advisories reference fixes; Mageia advises...
CVE-2020-6624
jhead through 3.04 has a heap-based buffer over-read in processDQT in jpgqguess.c...
openSUSE: Security Advisory for lz4 (openSUSE-SU-2019:2399-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[ASA-202001-2] file: arbitrary code execution
Arch Linux Security Advisory ASA-202001-2 ========================================= Severity: High Date : 2020-01-09 CVE-ID : CVE-2019-18218 Package : file Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1083 Summary ======= The package file before version...
PT-2020-19191 · Mats Peterson +5 · Jhead +5
Name of the Vulnerable Software and Affected Versions: jhead versions 3.04 and earlier Description: The issue is a heap-based buffer over-read in the process DQT function located in jpgqguess.c. This occurs in the processing of certain data. Recommendations: For versions 3.04 and earlier, at the...
AIX 7.2 TL 2 : tcpdump (IJ20784)
https://vulners.com/cve/CVE-2018-14467 https://vulners.com/cve/CVE-2018-14467 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP. The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint. The LMP parser in...
Amazon Linux 2 : oniguruma (ALAS-2020-1380)
The version of oniguruma installed on the remote host is prior to 5.9.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1380 advisory. Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. CVE-2019-16163 Oniguruma...
openSUSE: Security Advisory for expat (openSUSE-SU-2019:2205-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-6618
stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...