[SECURITY] Fedora 43 Update: brotli-1.2.0-1.fc43

Brotli is a generic-purpose lossless compression algorithm that compresses da ta using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the be st currently available general-purpose compression methods. ...

EUVD-2017-15944

Malware in sbrugna...

EUVD-2020-4103

Malware in sbrugna...

EUVD-2019-7612

Malware in sbrugna...

EUVD-2009-0479

Malware in sbrugna...

EUVD-2005-0904

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-3696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space...

CVE-2025-0081

CVE-2025-0081 concerns Android where the vulnerability is in dng_lossless_decoder::HuffDecode within dng_lossless_jpeg.cpp. The issue stems from uninitialized data in Huffman decoding, which can crash the process and cause remote denial of service without extra privileges and without user interac...

Linux Distros Unpatched Vulnerability : CVE-2019-17178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HuffmanTreemakeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied...

Linux Distros Unpatched Vulnerability : CVE-2021-39516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get located in huffmandecoder.hpp. It allo...

PT-2025-9577 · Google · Android

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A denial of service issue occurs when decoding a JPEG, specifically in the dng lossless decoder::HuffDecode function, due to a null pointer exception htbl = nullptr related to Huffman tables...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2024-2468)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the...

The vulnerability of the get_huffman_diff() function in the src\x3f\x3futils_patched.cpp component of the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the gethuffmandiff function in the src\x3f\x3futilspatched.cpp component of the LibRaw image processing library is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

Amazon Linux 2 : oci-add-hooks (ALASDOCKER-2024-042)

The version of oci-add-hooks installed on the remote host is prior to 0-0.2.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2024-042 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessi...

Amazon Linux 2 : cri-tools (ALAS-2024-2568)

The version of cri-tools installed on the remote host is prior to 1.29.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2568 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of...

CLSA-2024-1717678054 libwebp: Fix of CVE-2023-4863

CVE-2023-4863: fix OOB write in BuildHuffmanTable...

CentOS 7 : rhc-worker-script (RHSA-2024:2625)

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2625 advisory. - An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK sta...

AlmaLinux 9 : golang (ALSA-2024:1963)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1963 advisory. - An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state...

Updated golang packages fix security vulnerability

CVE-2023-45288: An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed...

BIT-GOLANG-2023-45288 HTTP/2 CONTINUATION flood in net/http

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...