CVE-2019-11597

CVE-2019-11597 affects ImageMagick 7.0.8-43 Q16 and earlier in the TIFF handling. The vulnerability is a heap-based buffer over-read in WriteTIFFImage (coders/tiff.c), related to TIFFRewriteDirectory/ TIFFWriteDirectory/ TIFFWriteDirectorySec/ TIFFWriteDirectoryTagColormap in LibTIFF. Exploitatio...

PT-2019-4898

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.7.1 Description The issue is related to the xiph SplitHeaders function in the VideoLAN VLC media player, which is associated with the use of memory after it has been freed. This can be exploited by a remot...

PT-2019-4899

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 3.0.7.1 Description The issue is related to a heap-based buffer over-read in the xiph PackHeaders function, located in modules/demux/xiph.h. This can be triggered by remote attackers using a crafted .ogg file,...

PT-2019-4897

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player versions through 3.0.7 Description The issue is related to a heap-based buffer over-read in the lavc CopyPicture function, located in modules/codec/avcodec/video.c, due to improper validation of the width and height...

CVE-2019-11597: Out-of-bounds Read

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

Security update for GraphicsMagick (moderate)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:1272-1 Rating: moderate References: 1132053 1132054 1132055 1132058 1132060 1132061 Cross-References: CVE-2019-11005 CVE-2019-11006 CVE-2019-11007 CVE-2019-11008 CVE-2019-11009 CVE-2019-11010 Affected...

openSUSE: Security Advisory for SDL (openSUSE-SU-2019:1223-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-10650

In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file...

SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2019:0950-1)

This update for SDL2 fixes the following issues : Security issues fixed : CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. CVE-2019-7576: Fixed heap-based buff...

openSUSE Security Update : netpbm (openSUSE-2019-1200)

This update for netpbm fixes the following issues : - CVE-2018-8975: The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file bsc1086777. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVE...

Security update for netpbm (moderate)

openSUSE Security Update: Security update for netpbm Announcement ID: openSUSE-SU-2019:1200-1 Rating: moderate References: 1086777 Cross-References: CVE-2018-8975 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for netpbm fix...

SUSE SLED12 / SLES12 Security Update : SDL (SUSE-SU-2019:0899-1)

This update for SDL fixes the following issues : Security issues fixed : CVE-2019-7572: Fixed a buffer over-read in IMAADPCMnibble in audio/SDLwave.c.bsc1124806. CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMAADPCM in audio/SDLwave.c bsc1125099. CVE-2019-7576: Fixed heap-based buffe...

Debian: Security Advisory (DLA-1752-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification...

[SECURITY] [DLA 1752-1] poppler security update

Package : poppler Version : 0.26.5-2+deb8u9 CVE ID : CVE-2019-9631 Debian Bug : A security issue was discovered in the poppler PDF rendering shared library. The Poppler shared library had a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. For Debian 8 "Jessie...

[SECURITY] [DLA 1751-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u4 CVE ID : CVE-2018-10242 CVE-2018-10243 Multiple vulnerabilities have been found in suricata, the network threat detection engine: CVE-2018-10242 Missing length check causing out-of-bounds read in SSHParseBanner app-layer-ssh.c. Remote attackers might...

CVE-2019-11006

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...

CVE-2019-11009

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file...

CVE-2019-11009

CVE-2019-11009: GraphicsMagick has a heap-based buffer over-read in ReadXWDImage (coders/xwd.c) that can cause denial of service or information disclosure when processing crafted XWD images. Affected product: GraphicsMagick 1.4 snapshot-20190322 Q8 (and related 1.3.31 references in older advisori...

CVE-2019-11007

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by a heap-based buffer over-read in the ReadMNGImage function (coders/png.c), enabling denial of service or information disclosure via image colormaps. Public disclosures and multiple advisories link CVE-2019-11007 to this issue. Impact details ...