openSUSE Security Update : opencv (openSUSE-2018-534)

This update for opencv fixes the following issues : - CVE-2018-5268: Fixed a heap-based buffer overflow in incv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cppwhen parsing a crafted image file. boo1075017 - CVE-2017-17760: Fixed an buffer overflow in function...

PT-2018-10653

Name of the Vulnerable Software and Affected Versions md4c version 0.2.5 Description The issue is caused by a heap-based buffer over-read due to an off-by-one error in the md is named entity contents function. Recommendations For md4c version 0.2.5, at the moment, there is no information about a...

CVE-2018-11547: Out-of-bounds Read

mdislinkreferencedefinitionhelper in md4c 0.2.5 has a heap-based buffer over-read because mdislinklabel mishandles loop termination...

CVE-2018-11504

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11504

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11504

The CVE-2018-11504 issue affects the DISCOUNT Markdown parser (DISCOUNT 2.2.3a) specifically the islist function in markdown.c within libmarkdown.a, allowing a crafted file to trigger a heap-based buffer over-read and cause a denial of service. Public advisories in connected documents confirm the...

CVE-2018-11503

The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11504

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

PT-2018-10621

Name of the Vulnerable Software and Affected Versions DISCOUNT version 2.2.3a Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, via a crafted file. This is demonstrated by the mkd2html function. Recommendations For version...

PT-2018-10620

Name of the Vulnerable Software and Affected Versions DISCOUNT version 2.2.3a Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, via a crafted file. This is demonstrated by the mkd2html function. Recommendations For version...

CVE-2018-11504: Out-of-bounds Read

The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11468

The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11468

The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11468

CVE-2018-11468 concerns the DISCOUNT Markdown engine (DISCOUNT 2.2.3a) where the __mkd_trim_line function in mkdio.c within libmarkdown.a is vulnerable to a heap-based buffer over-read via a crafted file, enabling a Denial of Service. Public advisories across distributions confirm the affected co...

CVE-2018-11468

The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...

CVE-2018-11468: Out-of-bounds Read

The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file, as demonstrated by mkd2html...