CVE-2018-19826

Summary: CVE-2018-19826 affects LibSass 3.5.5. A DoS can occur due to an infinite loop in Sass::Inspect::operator()(Sass::String_Quoted*) triggered by crafted Sass input containing stray '&' or '/' characters, leading to a high memory footprint. The upstream advisory notes the issue is closed as ...

CVE-2018-13259

It was discovered that zsh does not properly validate the shebang of input files and it truncates it to the first 64 bytes. A local attacker may use this flaw to make zsh execute a different binary than what is expected, named with a substring of the shebang one...

CVE-2018-10921

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls...

CVE-2018-10921

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls...

CVE-2018-10921

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls...

CVE-2018-11598

Espruino before 1.99 allows attackers to cause a denial of service application crash and a potential Information Disclosure with user crafted input files via a Buffer Overflow or Out-of-bounds Read during syntax parsing of certain for loops in jsparse.c...

DEBIAN-CVE-2017-14988

Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe tha...

Debian DLA-1057-1 : libraw security update

Some memory corruption bugs were discovered in libraw, a raw image decoder library, which could be triggered via maliciously crafted input files to cause denial of service or other unspecified impact. For Debian 7 'Wheezy', these problems have been fixed in version 0.14.6-2+deb7u2. We recommend...

Intel Security Anti-Virus Engine Security Bypass Vulnerability

Intel Security Anti-Virus Engine is an anti-virus engine for multiple operating systems that detects and removes viruses, spyware, Trojans, and worms in real time, ensuring comprehensive network protection for desktops and laptops. A security vulnerability exists in Intel Security AVE. A local...

Heap overflow

readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow...

DLA-417-1 xdelta3 - security update

Bulletin has no description...

Updated pngcrush package fixes security vulnerability

pngcrush-1.7.84 fixes defects reported by Coverity-scan, so it should be more resistant to crashes due to malformed input files, such as the one presented in CVE-2015-2158...

xdelta3 -- buffer overflow vulnerability

Stepan Golosunov reports: Buffer overflow was found and fixed in xdelta3 binary diff tool that allows arbitrary code execution from input files at least on some systems...

Updated rawtherapee package fixes security vulnerability

Due to flaws in the embedded copy of dcraw in rawtherapee, corrupt input files might trigger a division by zero, an infinite loop, or a null pointer dereference CVE-2013-1438...

Fedora 20 : ufraw-0.19.2-10.fc20 (2013-22832)

This update hardens ufraw against corrupt input files which might trigger a division by zero, an infinite loop, or a NULL pointer dereference otherwise. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...

Fedora 19 : ufraw-0.19.2-10.fc19 (2013-22924)

This update hardens ufraw against corrupt input files which might trigger a division by zero, an infinite loop, or a NULL pointer dereference otherwise. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...

Fedora 18 : ufraw-0.19.2-10.fc18 (2013-22899)

This update hardens ufraw against corrupt input files which might trigger a division by zero, an infinite loop, or a NULL pointer dereference otherwise. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...

Core Security Technologies Advisory 2008.0425

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ NASA BigView Stack Buffer Overflow Advisory Information Title: NASA BigView Stack Buffer Overflow Advisory ID: CORE-2008-0425 Advisory URL:...

Fedora 7 : ghostscript-8.15.4-4.fc7 (2008-2084)

This update contains a back-ported fix for a security issue that allows malicious PostScript input files to cause a stack-based buffer overflow CVE-2008-0411. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Low: Red Hat Security Advisory: elfutils security update

Updated elfutils packages that address a minor security issue and various other issues are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The elfutils packages contain a number of utility programs and libraries related to the creatio...