CVE-2019-11026

FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc...

UBUNTU-CVE-2019-11026

FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc...

CVE-2019-11024

The loadpnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion...

CVE-2019-11024

The loadpnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion...

DEBIAN-CVE-2019-11024

The loadpnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion...

DEBIAN-CVE-2019-11026

FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc...

CVE-2019-11026

FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc...

CVE-2019-11026

FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc...

CVE-2019-11026

Poppler 0.75.0 is affected by CVE-2019-11026 due to FontInfoScanner::scanFonts in FontInfo.cc causing infinite recursion, which can trigger error handling. Publicly cited entries (e.g., REDHAT_UNPATCHED-POPPLER-RHEL8.NASL and related Nessus plugins) describe this as an unpatched vulnerability wit...

CVE-2019-11024

CVE-2019-11024 affects libsixel 1.8.2, where the load_pnm function in frompnm.c can cause infinite recursion in libsixel.a. Red Hat’s advisory restates the issue as described. Several PT Security entries corroborate that the flaw resides in libsixel components (e.g., frompnm.c) and recommend upgr...

CVE-2019-11024

The loadpnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion...

CVE-2019-11024

The loadpnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion...

PT-2019-12146 · Poppler · Poppler

Name of the Vulnerable Software and Affected Versions: Poppler version 0.75.0 Description: The issue is related to infinite recursion in the FontInfoScanner::scanFonts function in FontInfo.cc, which leads to a call to the error function in Error.cc. Recommendations: For Poppler version 0.75.0, at...

PT-2019-12144 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: The issue is related to the load pnm function in frompnm.c in libsixel.a, which has infinite recursion. Recommendations: For libsixel version 1.8.2, at the moment, there is no information about a newer...

Sandbox Bypass

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Sandbox Bypass. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit...

SUSE-SU-2019:0776-1 Security update for w3m

This update for w3m fixes several issues. These security issues were fixed: - CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feedtableblocktag function which did not prevent a negative indent value bsc1077559 - CVE-2018-6197: Prevent NULL pointer dereference in...

CVE-2019-9143

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

The vulnerability of the Samba networking software’s LDAP server arises from an error in processing requests containing cyclic CNAME records. This error allows a hacker to trigger a service failure.

The vulnerability of the Samba networking software’s LDAP server is related to an error in processing requests that contain cyclic CNAME records. Exploiting this vulnerability can allow a malicious actor to trigger an infinite recursion on the server, resulting in service failure...

CVE-2019-9144

An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

Exiv2 bigtiffimage.cpp File Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by Andreas Huggel programmers. The product provides for reading and writing image metadata in a variety of EXIF, IPTC and XMP formats. A denial of service vulnerability exists in the 'BigTiffImage::printIFD'...