CVE-2020-6625

CVE-2020-6625 affects the jhead tool (up to and including version 3.04). The vulnerability is a heap-based buffer over-read in Get32s invoked from ProcessGpsInfo in gpsinfo.c, which can lead to partial confidentiality/availability impact as per CVSS. Public advisories indicate multiple vendors/de...

CVE-2020-6624

CVE-2020-6624 affects jhead up to version 3.04, with a heap-based buffer over-read in process_DQT (jpgqguess.c). Public advisories confirm impact on multiple distros and urge upgrading to newer jhead releases to mitigate. Debian/OpenSUSE/Gentoo/GNU/Linux advisories reference fixes; Mageia advises...

openSUSE: Security Advisory for expat (openSUSE-SU-2019:2205-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

AIX 7.2 TL 2 : tcpdump (IJ20784)

https://vulners.com/cve/CVE-2018-14467 https://vulners.com/cve/CVE-2018-14467 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP. The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint. The LMP parser in...

CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

CVE-2020-6620

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufget8...

Heap overflow

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

Heap overflow

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttfindtable...

CVE-2020-6618

Removed by vendor...

CVE-2020-6621

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT...

CVE-2020-6613

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6612

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

CVE-2020-6613

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c...

CVE-2020-6614

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

Heap overflow

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

Heap overflow

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...

CVE-2020-6612

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c...

CVE-2020-6613

CVE-2020-6613 affects GNU LibreDWG 0.9.3.2564 and is described as a heap-based over-read in bit_search_sentinel (bits.c). Connected entries show fixes in libredwg upstream to release 0.10 and security advisories (openSUSE/SUSE updates) that patch libredwg to mitigate CVE-2020-6613 (and related CV...

CVE-2020-6614

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c...

CVE-2019-20352

CVE-2019-20352 affects Netwide Assembler (NASM) 2.15rc0 with a heap-based buffer over-read in set_text_free, triggered when expand_one_smacro processes a crafted .asm file (asm/preproc.c). Exploitation could lead to a crash and, per CVSS3.1, high impact on confidentiality and availability (local,...