Moderate: Red Hat Security Advisory: xorg-x11-server-Xwayland security update

An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OSV-2024-393 Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67346 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpLayer::getHeaderLen pcpp::Packet::shortenLayer pcpp::BgpUpdateMessageLayer::setPathAttributes...

OSV-2024-390 Heap-buffer-overflow in H5O__cache_chk_serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67889 Crash type: Heap-buffer-overflow READ Crash state: H5Ocachechkserialize H5Cgenerateimage H5Cflushsingleentry...

OSV-2024-389 Heap-buffer-overflow in JS_CallInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67611 Crash type: Heap-buffer-overflow READ 1 Crash state: JSCallInternal asyncfuncresume jsasyncfunctionresume...

OSV-2024-387 Heap-buffer-overflow in H5F_addr_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68301 Crash type: Heap-buffer-overflow WRITE 1 Crash state: H5Faddrencode H5Ofsinfoencode H5Omsgflush...

OSV-2024-381 Heap-buffer-overflow in H5F__accum_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67852 Crash type: Heap-buffer-overflow READ Crash state: H5Faccumfree H5MFxfree H5MFfreeaggrs...

OSV-2024-370 Heap-buffer-overflow in H5O__chunk_protect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67820 Crash type: Heap-buffer-overflow READ 8 Crash state: H5Ochunkprotect H5Ochunkdelete H5Ocontdelete...

OSV-2024-360 Heap-buffer-overflow in pcpp::TelnetLayer::getFieldLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67752 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::TelnetLayer::getFieldLen pcpp::TelnetLayer::getFirstCommand readParsedPacket...

OSV-2024-352 Heap-buffer-overflow in __parse_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68156 Crash type: Heap-buffer-overflow READ Crash state: parseoptions parseoptions parseoptions...

OSV-2024-343 Heap-buffer-overflow in pcpp::BgpUpdateMessageLayer::setPathAttributes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67971 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpUpdateMessageLayer::setPathAttributes pcpp::BgpUpdateMessageLayer::clearPathAttributes readParsedPacket...

OSV-2024-340 Heap-buffer-overflow in Exiv2::AsfVideo::GUIDTag::GUIDTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68210 Crash type: Heap-buffer-overflow READ 8 Crash state: Exiv2::AsfVideo::GUIDTag::GUIDTag Exiv2::AsfVideo::streamProperties Exiv2::AsfVideo::decodeBlock...

OSV-2024-334 Heap-buffer-overflow in readParsedPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68162 Crash type: Heap-buffer-overflow READ Crash state: readParsedPacket FuzzTarget.cpp...

ALSA-2024:2137 Low: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: a heap-buffer-overflow in raw2imageex CVE-2023-1729 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

Low: LibRaw security update

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. Security Fixes: LibRaw: a heap-buffer-overflow in raw2imageex CVE-2023-1729 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-5367 xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions CVE-2023-6377 xorg-x11-server: out-of-bounds...

Moderate: mingw components security update

MinGW Minimalist GNU for Windows is a free and open source software development environment to create Microsoft Windows applications. Security Fixes: binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfdgetl64 CVE-2023-1579 For more details about the security issues, including the impac...

ALSA-2024:2169 Moderate: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-5367...

PT-2024-40720 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read crash was identified. The crash occurred in the readParsedPacket function, as indicated by the crash state. This issue was...

PT-2024-40722 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the Exiv2::AsfVideo::GUIDTag::GUIDTag, Exiv2::AsfVideo::streamProperties, and...

ALSA-2024:2170 Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-5367 xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions CVE-2023-6377 xorg-x11-server: out-of-bounds...