Security Bulletin: IBM Prospect is affected by Expat XML Parser vulnerability (CVE-2019-15903)

Summary Prospect Server is affected by Expat XML parsing vulnarability CVE-2019-15903 which may result in a heap-based buffer over-read. Vulnerability Details CVEID: CVE-2019-15903 DESCRIPTION: In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to...

CVE-2020-13439

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...

CVE-2020-13439

CVE-2020-13439 describes a heap-based buffer over-read in the jfif_decode function of ffjpeg’s jfif.c, affecting ffjpeg up to and including 2020-02-24. Public sources consistently identify the vulnerability as a memory-read/write boundary issue in the JPEG decoding path, with impact characterized...

CVE-2020-13439: Out-of-bounds Read

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfifdecode in jfif.c...

Denial Of Service (DoS)

libsndfile is vulnerable to denial of service DoS. The vulnerability exists as the flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted audio file...

Denial Of Service (DoS)

memcached is vulnerable to denial of service DoS. The vulnerability exists as the tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service segmentation fault via a request to add/set a key, which makes a comparison between signed and...

CVE-2020-12740

CVE-2020-12740 affects Tcpreplay (tcprewrite) up to version 4.3.2, due to a heap-based buffer over-read in get_ipv6_next() in common/get.c. This can enable information disclosure and, depending on context, may contribute to remote denial of service when processing crafted pcap input. Multiple adv...

CVE-2020-12740

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next at common/get.c...

CVE-2020-12740

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next at common/get.c...

CVE-2020-12740

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next at common/get.c...

CVE-2020-12740: Out-of-bounds Read

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next at common/get.c...

EulerOS Virtualization for ARM 64 3.0.2.0 : ghostscript (EulerOS-SA-2020-1549)

According to the versions of the ghostscript package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1548)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial Of Service DoS. It is possible because of a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel...

NewStart CGSL MAIN 4.05 : freetype Multiple Vulnerabilities (NS-SA-2020-0015)

The remote NewStart CGSL host, running version MAIN 4.05, has freetype packages installed that are affected by multiple vulnerabilities: - FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c. CVE-2015-9381 - FreeType before 2.6.1 has a buffer over-read i...

CVE-2020-11894

Ming aka libming 0.4.8 has a heap-based buffer over-read 8 bytes in the function decompileIF in decompile.c...

CVE-2020-11895

Ming aka libming 0.4.8 has a heap-based buffer over-read 2 bytes in the function decompileIF in decompile.c...

CVE-2020-11894

Ming aka libming 0.4.8 has a heap-based buffer over-read 8 bytes in the function decompileIF in decompile.c...

CVE-2020-11894

Ming aka libming 0.4.8 has a heap-based buffer over-read 8 bytes in the function decompileIF in decompile.c...

CVE-2020-11895

Ming aka libming 0.4.8 has a heap-based buffer over-read 2 bytes in the function decompileIF in decompile.c...