CVE-2019-9023

Removed by vendor...

CVE-2019-9023

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...

EulerOS 2.0 SP2 : poppler (EulerOS-SA-2019-1054)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - poppler: heap-based buffer over-read in XRef::getEntry in XRef.ccCVE-2019-7310 - poppler: out of bounds read in pdfunite CVE-2018-13988 -...

openSUSE Security Update : pspp / spread-sheet-widget (openSUSE-2019-212)

This update for pspp to version 1.2.0 fixes the following issues : Security issue fixed : - CVE-2018-20230: Fixed a heap-based buffer overflow in readbytesinternal function that could lead to denial-of-service bsc1120061. Other bug fixes and changes : - Add upstream patch to avoid compiling with...

openSUSE: Security Advisory for pspp (openSUSE-SU-2019:0212-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for php7 (moderate)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2019:0207-1 Rating: moderate References: 1118832 1123354 1123522 Cross-References: CVE-2018-19935 CVE-2019-6977 CVE-2019-6978 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities is now...

Security update for pspp, spread-sheet-widget (moderate)

openSUSE Security Update: Security update for pspp, spread-sheet-widget Announcement ID: openSUSE-SU-2019:0212-1 Rating: moderate References: 1120061 Cross-References: CVE-2018-20230 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This...

CVE-2019-8355

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...

Security update for pspp, spread-sheet-widget (moderate)

openSUSE Security Update: Security update for pspp, spread-sheet-widget Announcement ID: openSUSE-SU-2019:0198-1 Rating: moderate References: 1120061 Cross-References: CVE-2018-20230 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This...

CVE-2019-8378

The CVE-2019-8378 entry covers Bento4 1.5.1-628 with a heap-based buffer over-read in AP4_BitStream::ReadBytes() (Codecs/Ap4BitStream.cpp). A crafted file sent to the aac2mp4 binary can trigger a Segmentation fault, causing a Denial of Service, with possible unspecified other impact. Connected re...

CVE-2019-8378

An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp, a similar issue to CVE-2017-14645. It can be triggered by sending a crafted file to the aac2mp4 binary. It allows an attacker to cause a Denial of Service...

CVE-2019-8354

An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...

CVE-2019-8355

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...

CVE-2019-8355

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...

CVE-2019-8354

An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...

Integer overflow

An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...

CVE-2019-8355

CVE-2019-8355 affects SoX 14.4.2. The issue is an integer overflow in xmalloc.h’s multiplication fed into the lsx_valloc macro, causing a buffer allocated smaller than expected and a heap-based buffer overflow in channels_start (remix.c). This can lead to a crash or potential memory corruption as...

CVE-2019-8355

An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...

CVE-2019-8354

SoX 14.4.2 is affected by CVE-2019-8354 due to an integer overflow in lsx_make_lpf (effect_i_dsp.c) that leads to a heap-based buffer overflow when allocating memory. ENISA OSV entries and Mageia/Ubuntu/Nessus advisories corroborate the issue and list it alongside other SoX CVEs (e.g., 2019-8355,...

CVE-2019-8354

An issue was discovered in SoX 14.4.2. lsxmakelpf in effectidsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow...