69 matches found
[slackware-security] libpng
New libpng packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpng-1.6.59-i586-1slack15.0.txz: Upgraded. Fixed use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP...
EUVD-2020-13449
Malware in sbrugna...
EUVD-2020-13448
Malware in sbrugna...
EUVD-2006-0067
Malware in sbrugna...
EUVD-2020-13447
Malware in sbrugna...
EUVD-2006-7221
Malware in sbrugna...
EUVD-2023-26566
Malicious code in bioql PyPI...
EUVD-2022-34551
Malicious code in bioql PyPI...
Memory leak in the embedded_profile_len function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an incomplete fix for CVE-2006-7244.
...
The vulnerability of the SNAP Lite component allows for manipulation of the control and monitoring systems in the energy and water supply sectors of SISCO MMS-EASE and AX-S4 ICCP, enabling a perpetrator to cause service interruptions.
The vulnerability of the SNAP Lite component in the system for managing and monitoring processes related to energy and water supply in SISCO MMS-EASE and AX-S4 ICCP is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...
CVE-2020-20490
A heap buffer-overflow in the clientexample1.c component of libieciccpmod v1.5 leads to a denial of service DOS...
SUSE CVE-2004-0598
The pnghandleiCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service application crash via a certain PNG image that triggers a null dereference...
SUSE CVE-2006-7244
Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length...
SUSE CVE-2009-5063
Memory leak in the embeddedprofilelen function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an...
CVE-2023-22403
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. On QFX10K Series, Inter-Chassis Control Protocol ICCP is used in MC-LAG...
Design/Logic Flaw
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. On QFX10K Series, Inter-Chassis Control Protocol ICCP is used in MC-LAG...
CVE-2023-22403 Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. On QFX10K Series, Inter-Chassis Control Protocol ICCP is used in MC-LAG...
CVE-2023-22403 Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. On QFX10K Series, Inter-Chassis Control Protocol ICCP is used in MC-LAG...
CVE-2023-22403: Allocation of Resources Without Limits or Throttling
An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. On QFX10K Series, Inter-Chassis Control Protocol ICCP is used in MC-LAG...
CVE-2022-38138: Access of Uninitialized Pointer
The Triangle Microworks IEC 61850 Library Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C, or Java language library with a version number of 5.0.1 or earlier and 60870-6 ICCP/TASE.2 Library Any client or server...