3178 matches found
EulerOS 2.0 SP3 : expat (EulerOS-SA-2019-2256)
According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox 50.CVE-2016-9063 - In libexpat before...
EulerOS 2.0 SP5 : memcached (EulerOS-SA-2019-2213)
According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume Network Amplification, CWE-406 vulnerability in the UDP...
EulerOS 2.0 SP3 : poppler (EulerOS-SA-2019-2269)
According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Poppler 0.68.0, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage thi...
EulerOS 2.0 SP5 : unzip (EulerOS-SA-2019-2234)
According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute...
Amazon Linux 2 : libjpeg-turbo (ALAS-2019-1350)
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file.CVE-2016-3616 A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file...
CVE-2019-18798
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...
CVE-2019-18798
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...
PT-2019-15670
Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.6.3 Description The issue allows a heap-based buffer over-read in the Sass::weaveParents function located in ast sel weave.cpp. Recommendations For versions prior to 3.6.3, update to version 3.6.3 or later to resolv...
PT-2019-5887
Name of the Vulnerable Software and Affected Versions Oniguruma versions prior to 6.9.4 rc2 Description The issue is related to the function fetch interval quantifier formerly known as fetch range quantifier in the Oniguruma library for regular expressions, which is associated with a heap-based...
CVE-2019-18798: Out-of-bounds Read
LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in astselweave.cpp...
PT-2019-5904
Name of the Vulnerable Software and Affected Versions Oniguruma versions prior to 6.9.4 rc2 Description The issue is related to a heap-based buffer over-read in the gb18030 mbc enc len function, located in the gb18030.c file. This occurs because a UChar pointer is dereferenced without checking if...
libjpeg-turbo security update
An update is available for libjpeg-turbo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libjpeg-turbo packages contain a library of functions for...
RLSA-2019:3705 Moderate: libjpeg-turbo security update
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...
CVE-2019-15141
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service application crash resulting from a heap-based buffer over-read via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and...
CVE-2019-9023
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...
Low: exiv2
Issue Overview: An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of...
Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.
Summary GNU Binutils is used by IBM Netezza Platform Software. IBM Netezza Platform Software has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-14129 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by a heap-based buffer over-read in the readsection...
NewStart CGSL CORE 5.04 / MAIN 5.04 : exiv2 Multiple Vulnerabilities (NS-SA-2019-0188)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has exiv2 packages installed that are affected by multiple vulnerabilities: - In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the == 0x1c case...
