SUSE-SU-2019:1495-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following security issues: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote bsc1137595. - CVE-2019-11704: Fixed a heap-based buffer overflow in parsergetnextchar bsc1137595. - CVE-2019-11705: Fixed a stack-based buffer...

SUSE SLED15 / SLES15 Security Update : elfutils (SUSE-SU-2019:1486-1)

This update for elfutils fixes the following issues : Security issues fixed : CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 CVE-2017-7609: Fixed a memory allocation failure in...

Panasonic Control FPWIN PRO Project File Parsing sc_app Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Control FPWin Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Panasonic Control FPWIN PRO Project File Parsing ctreestd Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Control FPWin Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2019-12790

In radare2 through 3.5.1, there is a heap-based buffer over-read in the regglangparsechar function of egglang.c. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c...

CVE-2019-12790

CVE-2019-12790 affects radare2 up to version 3.5.1, where a heap-based buffer over-read in egg_lang.c (r_egg_lang_parsechar) allows denial of service via application crash due to missing length validation in libr/egg/egg.c. Connected advisories confirm this and note that a fix is included in rada...

Denial Of Service (DoS)

libjasper.so is vulnerable to denial of service. A heap-based buffer overflow of size 1 in the function jasicctxtdescinput in libjasper/base/jasicc.c allows an attacker to crash the process...

Panasonic Control FPWIN Pro

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Panasonic Equipment: Control FPWIN Pro Vulnerabilities: Heap-based Buffer Overflow, Type Confusion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device and allow remote code...

PHP 7.3.x < 7.3.6 Multiple Vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.3.x prior to 7.3.6. It is, therefore, affected by the following vulnerabilities: - An uninitialized vulnerability exists in gdImageCreateFromXbm due to sscanf method not being able to read a hex value. An attacker m...

CVE-2019-6743

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2019-6743

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

openSUSE Security Update : bluez (openSUSE-2019-1476)

This update for bluez fixes the following issues : Security issues fixed : - CVE-2016-9797: Fixed a buffer over-read in l2capdump bsc1013708. - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. - CVE-2016-9917: Fixed a heap-based buffer overflow in readn bsc1015171. This update was...

PHP 7.1.x < 7.1.30 Multiple Vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.30. It is, therefore, affected by the following vulnerabilities: - An uninitialized vulnerability exists in gdImageCreateFromXbm due to sscanf method not being able to read a hex value. An attacker...

PHP 7.2.x < 7.2.19 Multiple Vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.19. It is, therefore, affected by the following vulnerabilities: - An uninitialized vulnerability exists in gdImageCreateFromXbm due to sscanf method not being able to read a hex value. An attacker...

CVE-2019-12483

An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGFIPMPXRemoveToolNotificationListener in odf/ipmpxcode.c in libgpac.a, as demonstrated by MP4Box...

CVE-2019-12483

CVE-2019-12483 concerns GPAC 0.7.1, with a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener (odf/ipmpx_code.c in libgpac.a), as demonstrated by MP4Box. The connected sources (OSV entries, Debian/NASL notes) consistently describe this vulnerability and its pre...

CVE-2019-12483

An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGFIPMPXRemoveToolNotificationListener in odf/ipmpxcode.c in libgpac.a, as demonstrated by MP4Box...

Security update for bluez (moderate)

openSUSE Security Update: Security update for bluez Announcement ID: openSUSE-SU-2019:1476-1 Rating: moderate References: 1013708 1013712 1013893 1015171 Cross-References: CVE-2016-9797 CVE-2016-9798 CVE-2016-9802 CVE-2016-9917 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update th...

EulerOS 2.0 SP5 : gstreamer-plugins-base (EulerOS-SA-2019-1579)

According to the version of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server,...

Medium: libxml2

Issue Overview: A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.CVE-2015-8242 A denial of service flaw w...