CVE-2018-20539

Removed by vendor...

CVE-2018-20546

There is an illegal READ memory access at caca/dither.c function getrgbadefault in libcaca 0.99.beta19 for the default bpp case...

CVE-2018-20547

There is an illegal READ memory access at caca/dither.c function getrgbadefault in libcaca 0.99.beta19 for 24bpp data...

CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application...

CVE-2018-20548

CVE-2018-20548 : In libcaca, there is an illegal WRITE memory access in load_image (common-image.c) when processing 1bpp data in version 0.99.beta19. The FreeBSD VuXML entry confirms this CVE within a set of libcaca memory-access issues. Several vendor advisories (SUSE/openSUSE/Fedora/SLE) docume...

CVE-2018-20534

CVE-2018-20534 refers to an illegal address access in libsolv.a (libsolv) in versions up to 0.7.2, which the sources describe as causing a denial of service. The issue is echoed across multiple advisories (e.g., Ubuntu USN-4851, Oracle Linux ELSA, AlmaLinux ALSA) and is noted in some entries as d...

CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application...

UBUNTU-CVE-2018-20545

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 4bpp data...

UBUNTU-CVE-2018-20549

There is an illegal WRITE memory access at caca/file.c function cacafileread in libcaca 0.99.beta19...

Libcaca Illegal Read Memory Access Vulnerability

libcaca is a software library that converts images to color ASCII art. An illegal read memory access vulnerability exists in the getrgbadefault function in caca/dither.c in libcaca 0.99.beta19, which can be exploited by an attacker to read sensitive information...

CVE-2018-20546

There is an illegal READ memory access at caca/dither.c function getrgbadefault in libcaca 0.99.beta19 for the default bpp case...

UBUNTU-CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application...

libcaca illegal write memory access vulnerability (CNVD-2019-08079)

libcaca is a software library that converts images to color ASCII art. An illegal write memory access vulnerability exists in the cacafileread function in caca/file.c in libcaca 0.99.beta19, which can be exploited by an attacker to execute arbitrary code...

CVE-2018-20545

There is an illegal WRITE memory access at common-image.c function loadimage in libcaca 0.99.beta19 for 4bpp data...

UBUNTU-CVE-2018-20546

There is an illegal READ memory access at caca/dither.c function getrgbadefault in libcaca 0.99.beta19 for the default bpp case...

UBUNTU-CVE-2018-20547

There is an illegal READ memory access at caca/dither.c function getrgbadefault in libcaca 0.99.beta19 for 24bpp data...

DEBIAN-CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

Friday Squid Blogging: Illegal North Korean Squid Fishing

North Korea is engaged in even more illegal squid fishing than previously. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...