12488 matches found
Advisory ROSA-SA-2021-1897
Software: libtirpc 0.2.4 OS: Cobalt 7.9 CVE-ID: CVE-2018-14621 CVE-Crit: HIGH CVE-DESC: An infinite loop vulnerability was discovered in libtirpc before version 1.0.2-rc2. If a port uses polling rather than selection, exhaustion of file descriptors will cause the server to enter an infinite loop,...
Advisory ROSA-SA-2021-1865
Software: libcroco 0.6.12 OS: Cobalt 7.9 CVE-ID: CVE-2017-7960 CVE-Crit: MEDIUM CVE-DESC: The crinputnewfromuri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service heap-based buffer re-read via a crafted CSS file. CVE-STATUS: default CVE-REV:...
The vulnerability of the ReadMIFFImage function in the coders/miff.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.
The vulnerability of the ReadMIFFImage function in the coders/miff.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created MIFF image...
The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows a hacker to cause a service failure.
The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created mng file...
The vulnerability of the ReadPSDChannelZip function in the ImageMagick console graphics editor’s coders/psd.c component allows a hacker to cause a service failure due to an infinite loop.
The vulnerability of the ReadPSDChannelZip function in the ImageMagick console graphics editor’s coders/psd.c component is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created PSD image...
The vulnerability of the ReadTXTImage function in the coders/txt.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.
The vulnerability of the ReadTXTImage function in the coders/txt.c component of the console image editing tool ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created image file...
EulerOS Virtualization for ARM 64 3.0.2.0 : cairo (EulerOS-SA-2021-2095)
According to the versions of the cairo packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file...
EulerOS Virtualization for ARM 64 3.0.2.0 : gdk-pixbuf2 (EulerOS-SA-2021-2111)
According to the versions of the gdk-pixbuf2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used ...
The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the console image editing tool ImageMagick, which is related to infinite loop execution, allows a hacker to cause a service failure.
The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially creat...
Denial Of Service (DoS)
bass is vulnerable to denial of service. An infinite loop occurs when an attacker submits a malicious .mp3 file...
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-2050)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : golang (EulerOS-SA-2021-2061)
According to the version of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the...
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-2061)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated glibc packages fix a security vulnerability
A vulnerability was found in the iconv program provided by glibc when it's invoked with the -c option. It can enter an infinite loop while parsing an invalid multi-byte sequence CVE-2016-10228...
MGASA-2021-0289 Updated glibc packages fix a security vulnerability
A vulnerability was found in the iconv program provided by glibc when it's invoked with the -c option. It can enter an infinite loop while parsing an invalid multi-byte sequence CVE-2016-10228...
EulerOS 2.0 SP8 : golang (EulerOS-SA-2021-1980)
According to the version of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the...
CVE-2020-14040
A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vulnerability. If an attacker is able to supply specific...
SUSE-SU-2021:2164-1 Security update for zziplib
This update for zziplib fixes the following issues: - CVE-2020-18442: Fixed infinite loop in zzipfileread as used in unzzipcatfile bsc1187526...