EulerOS Virtualization for ARM 64 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2020-2040)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer...

RHEL 7 : audiofile (RHSA-2020:3877)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3877 advisory. The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like...

EulerOS Virtualization for ARM 64 3.0.6.0 : freetype (EulerOS-SA-2020-2025)

According to the versions of the freetype package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The RaggedCountSparseOutput implementation does not validate that the input arguments form a valid ragged tensor, allowing an attacker to exploit the vulnerability to cause an application crash via a segmentation fault from a heap-based buffer overfl...

EulerOS 2.0 SP3 : libtiff (EulerOS-SA-2020-2145)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage...

EulerOS 2.0 SP3 : giflib (EulerOS-SA-2020-2148)

According to the version of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The DGifDecompressLine function in dgiflib.c in GIFLIB possibly version 3.0.x, as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer...

EulerOS 2.0 SP3 : audiofile (EulerOS-SA-2020-2098)

According to the versions of the audiofile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an...

EulerOS 2.0 SP3 : libplist (EulerOS-SA-2020-2125)

According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation...

EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2020-2080)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have...

EulerOS 2.0 SP3 : libvorbis (EulerOS-SA-2020-2107)

According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a...

Denial Of Service (DoS)

binutils is vulnerable to denial of service. A heap-based buffer overflow in the loadspecificdebugsection function in objdump.c allows an attacker to exploit the vulnerability via a malicious section size and crash the application...

Denial Of Service (DoS)

sox:eoan is vulnerable to denial of service DoS. There is an integer overflow on the result of multiplication fed into the lsxvalloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channelsstart in remix.c...

Denial Of Service (DoS)

apng2gif is vulnerable to denial of service DoS. The vulnerability exists through an integer overflow resulting in a heap-based buffer overflow in the readchunk function...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists as through a heap-based buffer overflow in the AcquireCacheNexus function in magick/pixelcache.c...

Denial Of Service (DoS)

chromium-browser:focal is vulnerable to denial of service DoS. Heap-based buffer overflow in j2k.c in OpenJPEG allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...

Information Disclosure

binutils is vulnerable to information disclosure. A heap-based buffer overflow from an integer overflow in the function simpleobjectelfmatch in simple-object-elf.c allows an attacker to obtain arbitrary data from memory. This is due to a lack of check for a zero shstrndx value...

Arbitrary Code Execution

binutils is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer overflow in processmipsspecific in readelf.c via a malformed MIPS option section...

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2020-1963)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : virglrenderer (EulerOS-SA-2020-1970)

According to the versions of the virglrenderer package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in virglrenderer. The vrendrenderertransferwriteiov function allows...