openSUSE: Security Advisory for libmirage (openSUSE-SU-2019:2040-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libmirage (moderate)

openSUSE Security Update: Security update for libmirage Announcement ID: openSUSE-SU-2019:2033-1 Rating: moderate References: 1148087 Cross-References: CVE-2019-15540 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

Security update for libmirage (moderate)

openSUSE Security Update: Security update for libmirage Announcement ID: openSUSE-SU-2019:2040-1 Rating: moderate References: 1148087 Cross-References: CVE-2019-15540 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for...

libguestfs security update

CentOS Errata and Security Advisory CESA-2019:2308 An update for libguestfs-winsupport is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Oracle Linux 8 : pango (ELSA-2019-2582)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2582 advisory. - Security fix for CVE-2019-1010238 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

RHEL 8 : pango (RHSA-2019:2582)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2582 advisory. Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango forms the core of text and font handling for...

CentOS 7 : libguestfs-winsupport (CESA-2019:2308)

An update for libguestfs-winsupport is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2019-14970

A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2019-14970

A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

Heap overflow

A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2019-14970

A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

CVE-2019-14970

CVE-2019-14970 affects VLC media player (3.0.7.1 and earlier). The vulnerability is in the MKV demuxer code path, specifically mkv::event_thread_t, allowing a crafted .mkv file to trigger a heap-based buffer overflow. Public disclosures across multiple advisories confirm VLC 3.0.8 fixes this and ...

Important: Red Hat Security Advisory: pango security update

An update for pango is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Arbitrary Code Execution

pango is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function pangolog2visgetembeddinglevels allows a remote attacker to execute arbitrary code by passing malicious utf-8 strings to the pangoitemize function...

KLA11761 Multiple vulnerabilities in VLC media player

Multiple vulnerabilities were found in VLC media player. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Integer Underflow vulnerability can be exploited to cause a denial of service; 2. Heap-based buffer over-read...

Scientific Linux Security Update : pango on SL7.x x86_64 (20190828)

Security Fixes : - pango: pangolog2visgetembeddinglevels heap-based buffer overflow CVE-2019-1010238 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128311; scriptversion"1.4";...

CVE-2019-14970

A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow via a crafted .mkv file...

Important: Red Hat Security Advisory: pango security update

An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2019-14814

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of servicesystem crash or possibly execute arbitrary code...

Oracle Linux 7 : pango (ELSA-2019-2571)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2571 advisory. - Security fix for CVE-2019-1010238 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...