PT-2018-12644 · Red Hat +1 · Gluster +1

Name of the Vulnerable Software and Affected Versions: Gluster file system versions 3.12 through 4.1.4 Description: The issue is related to a heap-based buffer overflow in the server getspec function, which can be triggered via the gf getspec req RPC message. This could allow a remote authenticat...

OMRON CX-One CX-FLnet Type Heap-based Buffer Overflow (CVE-2018-8834)

A heap-based overflow exists in OMRON CX-One CX-FLnet module. The vulnerability is due to input validation error when processing Type parameter of the FLN configuration file...

Fuji Electric Alpha5 Smart Loader (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Fuji Electric Equipment: Alpha5 Smart Loader Vulnerabilities: Classic Buffer Overflow, Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a...

openSUSE Security Update : libraw (openSUSE-2018-849)

This update for libraw fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-5813: Fixed an error within the 'parseminolta' function dcraw/dcraw.c that could be exploited to trigger an infinite loop via a specially crafted file. This could be exploited to...

CVE-2018-5810

A heap-based buffer overflow has been discovered in LibRaw, in the way rolleiloadraw function in internal/dcrawcommon.cpp file handles the input image. An attacker could trigger the flaw by providing a specially crafted Rollei RAW Image, which could result in a crash or other unspecified effects...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a heap-based buffer overflow that occurs in the PackBitsDecode function of tifpackbits.c, causing a DoS attack when parsing an invalid bmp file...

UBUNTU-CVE-2018-14453

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData1 access in the function store16 in helper.h...

CVE-2018-14453

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData1 access in the function store16 in helper.h...

Exiv2 Buffer Overflow Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in the...

CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

UBUNTU-CVE-2018-12578

There is a heap-based buffer overflow in bmpcompress1row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9604 DESCRIPTION: Linux Kernel could allow a local attacker to bypass security restrictions, caused by an error in the built-in keyrings for...

Security Bulletin: Multiple vulnerabilities in the GNU C Library (glibc) affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in GNU glibc. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the nssdns backend for the...

Security Bulletin: Multiple Vulnerabilities in Firefox affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance

Summary Multiple Vulnerabilities in Firefox affect IBM SmartCloud Provisioning 2.1 for IBM Software Virtual Appliance. Vulnerability Details CVEID: CVE-2015-4506 DESCRIPTION: Mozilla Firefox is vulnerable to a buffer overflow, caused by improper bounds checking in the libvpx library when parsing...

CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

CVE-2018-11536

md4c before 0.2.5 has a heap-based buffer overflow because mdsplitsimplepairingmark mishandles splits...

DISCOUNT Denial of Service Vulnerability

DISCOUNT is a Markdown markup language implementation. A security vulnerability exists in the 'islist' function of the markdown.c file of the libmarkdown.a static link library in DISCOUNT version 2.2.3a. A remote attacker can exploit this vulnerability to cause a denial of service heap-based buff...

Heap overflow

The DGifDecompressLine function in dgiflib.c in GIFLIB possibly version 3.0.x, as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private-RunningCode - 2" array index is not checked. This will lead to a denial of service or possibly unspecified other...

CVE-2018-8871

In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution...

OMRON CX-One CX-FLnet Version and Node Name Heap-based Buffer Overflow (CVE-2018-8834)

A heap-based overflow exists in OMRON CX-One CX-FLnet module. The vulnerability is due to input validation error when processing Version and Node Name parameter of the FLN configuration file. A remote attacker could exploit these vulnerabilities by enticing a target user into opening a maliciousl...