Heap overflow

In libIEC61850 1.4.0, MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c has a heap-based buffer overflow...

CVE-2019-19931

In libIEC61850 1.4.0, MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c has a heap-based buffer overflow...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-2710)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-2686)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-bas...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3379-1)

The SUSE Linux Enterprise 12 SP 3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts ...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2019-2707)

According to the version of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18391

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-18389

A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service, or QEMU guest-to-host escape and code execution, via VIRGLCCMDRESOURCEINLINEWRITE commands...

CVE-2019-19918

CVE-2019-19918 affects Lout 3.40. It is a heap-based buffer overflow in srcnext() (z02.c). OpenSUSE/Mageia/Fedora advisories confirm CVE-2019-19918 and also CVE-2019-19917 (StringQuotedWord() overflow). Patches/updates have been released for affected distros (e.g., lout package updates in Fedora/...

CVE-2019-19918

Lout 3.40 has a heap-based buffer overflow in the srcnext function in z02.c...

Amazon Linux AMI : file (ALAS-2019-1326)

cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write. CVE-2019-18218 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Amazon Linux 2 : file (ALAS-2019-1370)

cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write.CVE-2019-18218 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Amazon Linux 2 : SDL (ALAS-2019-1375)

A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulnerable to this flaw, which could allow an attacker to ma...

EulerOS 2.0 SP3 : gd (EulerOS-SA-2019-2583)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer signedness error in GD Graphics Library 2.1.1 aka libgd or libgd2 allows remote attackers to cause a denial of service crash or potentially...

EulerOS 2.0 SP3 : dosfstools (EulerOS-SA-2019-2570)

According to the versions of the dosfstools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The readboot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service crash via a crafted filesystem, which...

CVE-2019-18391

A heap-based buffer overflow flaw was found in virglrenderer. The vrendrenderertransferwriteiov function allows guest OS users to cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2019-2639)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an...

EulerOS 2.0 SP3 : gpgme (EulerOS-SA-2019-2591)

According to the version of the gpgme package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote...