openSUSE Security Update : audiofile (openSUSE-2019-879)

This update for audiofile fixes the following issues : - CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run could occurred when running sfconvert leading to crashes or code execution when handling untrusted soundfiles bsc1111586. This update was imported from the...

SUSE-SU-2019:0747-1 Security update for gd

This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522...

Heap overflow

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or curren...

CVE-2019-7713

The vulnerability CVE-2019-7713 affects Green Hills INTEGRITY RTOS 5.0.4, specifically the Interpeak IPCOMShell TELNET server. A heap-based buffer overflow occurs in the function that prints the shell prompt when a custom modifier expands information (e.g., process ID, IP address, current directo...

EulerOS 2.0 SP3 : php (EulerOS-SA-2019-1100)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an...

EulerOS 2.0 SP3 : binutils (EulerOS-SA-2019-1089)

According to the version of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - binutils: integer overflow leads to heap-based buffer overflow in objdumpCVE-2018-1000876 Note that Tenable Network Security has extracted the...

EulerOS 2.0 SP3 : poppler (EulerOS-SA-2019-1102)

According to the version of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - poppler: heap-based buffer over-read in XRef::getEntry in XRef.ccCVE-2019-7310 Note that Tenable Network Security has extracted the preceding...

CVE-2019-9936

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5hash.c...

SUSE SLED15 / SLES15 Security Update : libgxps (SUSE-SU-2019:0720-1)

This update for libgxps fixes the following issues : CVE-2018-10733: Fixed a heap-based buffer over-read issue in ftfontfacehash bsc1092125. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2019:0711-1)

This update for libjpeg-turbo fixes the following issues : The following security vulnerabilities were addressed : CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service bsc1128712. CVE-2018-11813: Fixed the end-of-fi...

Debian DLA-1724-1 : ntfs-3g security update

A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation. For Debian 8 'Jessie', this problem has been fixed in version 1:2014.2.15AR.2-1+deb8u4. We recommend that you upgrade your...

OPENSUSE-SU-2019:0019-1 Security update for discount

This update for discount to version 2.2.4 fixes the following issues: Security issues fixed: - CVE-2018-11468: Fixed a heap-based buffer over-read in the mkdtrimline function from mkdio.c boo1094809 - CVE-2018-12495: Fixed a heap-based buffer over-read via a crafted file boo1098252...

CVE-2019-9936

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5hash.c...

CVE-2019-9936

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5hash.c...

CVE-2019-9936

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5hash.c...

CVE-2019-9936

In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5hash.c...

CVE-2019-6778

In QEMU 3.0.0, tcpemu in slirp/tcpsubr.c has a heap-based buffer overflow...

Heap overflow

In QEMU 3.0.0, tcpemu in slirp/tcpsubr.c has a heap-based buffer overflow...

rdesktop <= 1.8.3 Multiple Vulnerabilities

rdesktop is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;...

Debian: Security Advisory (DSA-4413-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...