PYSEC-2018-117

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20098

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20096: Out-of-bounds Read

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20098: Out-of-bounds Read

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

SUSE SLED12 / SLES12 Security Update : libarchive (SUSE-SU-2018:3640-2)

This update for libarchive fixes the following issues : CVE-2016-10209: The archivewstringappendfrommbs function in archivestring.c allowed remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. bsc1032089 CVE-2016-10349: The...

EulerOS 2.0 SP3 : libcdio (EulerOS-SA-2018-1390)

According to the versions of the libcdio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libcdio: Heap-based buffer over-read in printiso9660recurse function in iso-info.c CVE-2017-18198 - libcdio: NULL pointer dereference in...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19839

CVE-2018-19839 affects LibSass prior to 3.5.5. The vulnerability is a heap-based buffer over-read in Sass::handle_error (sass_context.cpp) that attackers can trigger via a crafted Sass file, causing a denial-of-service. Public details in the initial document confirm the exact function and file, t...

CVE-2018-19839

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer over-read in the function Exiv2::IptcData::printStructure in src/iptc.cpp allows a remote attacker to cause a denial of service condition...

PT-2018-15123

Name of the Vulnerable Software and Affected Versions LibSass versions prior to 3.5.5 Description The issue allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file. This is due to the function handle error in sass context.cpp...

CVE-2018-19839: Out-of-bounds Read

In LibSass prior to 3.5.5, the function handleerror in sasscontext.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file...

CVE-2018-19758

There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of service...

CVE-2018-19756

There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19759

There is a heap-based buffer over-read at stbimagewrite.h function: stbiwritepngtomem in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19756

There is a heap-based buffer over-read at stbimage.h function: stbitgaload in libsixel 1.8.2 that will cause a denial of service...

CVE-2018-19759

There is a heap-based buffer over-read at stbimagewrite.h function: stbiwritepngtomem in libsixel 1.8.2 that will cause a denial of service...