Lucene search
K

663 matches found

RedHat Linux
RedHat Linux
added 2020/11/05 9:0 a.m.4 views

freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application memory when an attacker supplies a specially crafted TTF file...

9.6CVSS7.3AI score0.93031EPSS
Exploits2References5
RedHat Linux
RedHat Linux
added 2020/11/05 8:49 a.m.5 views

freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application memory when an attacker supplies a specially crafted TTF file...

9.6CVSS7.3AI score0.93031EPSS
Exploits2References5
RedHat Linux
RedHat Linux
added 2020/11/05 8:40 a.m.4 views

freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application memory when an attacker supplies a specially crafted TTF file...

9.6CVSS7.3AI score0.93031EPSS
Exploits2References5
OSV
OSV
added 2020/11/05 8:26 a.m.29 views

RLSA-2020:4952 Important: freetype security update

FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently. Security Fixes: freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng CVE-2020-15999 For more details about the...

8.6CVSS8.8AI score0.93031EPSS
Exploits2References2
Veracode
Veracode
added 2020/11/05 3:17 a.m.42 views

Heap Buffer Overflow

FreeType is vulnerable to heap-based buffer overflow due to integer truncation in LoadSBitPng...

9.6CVSS3AI score0.93031EPSS
Exploits2References14Affected Software6
Tenable Nessus
Tenable Nessus
added 2020/11/05 12:0 a.m.47 views

RHEL 8 : freetype (RHSA-2020:4949)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4949 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

9.6CVSS8.5AI score0.93031EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2020/11/05 12:0 a.m.54 views

RHEL 8 : freetype (RHSA-2020:4950)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4950 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

9.6CVSS8.5AI score0.93031EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2020/11/04 2:38 p.m.2 views

freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application memory when an attacker supplies a specially crafted TTF file...

9.6CVSS7.3AI score0.93031EPSS
Exploits2References5
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:0 a.m.157 views

RHEL 7 : freetype (RHSA-2020:4907)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4907 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

9.6CVSS8.5AI score0.93031EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2020/11/04 12:0 a.m.30 views

RHEL 8 : dpdk (RHSA-2020:4806)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4806 advisory. The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user...

7.7CVSS6.7AI score0.00606EPSS
Exploits0References15
AlmaLinux
AlmaLinux
added 2020/11/03 12:37 p.m.41 views

Important: dpdk security, bug fix, and enhancement update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. The following packages have been upgraded to a later upstream version: dpdk 19.11.3. BZ1824905 Security Fixes: dpdk: librtevhost Malicious guest could...

4.6CVSS2.4AI score0.00606EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/10/30 12:0 a.m.36 views

openSUSE Security Update : tensorflow2 (openSUSE-2020-1766)

This update for tensorflow2 fixes the following issues : - updated to 2.1.2 with following fixes boo1177022 : - Fixes an undefined behavior causing a segfault in tf.rawops.Switch CVE-2020-15190 - Fixes three vulnerabilities in conversion to DLPack format CVE-2020-15191, CVE-2020-15192,...

9.8CVSS6.4AI score0.01411EPSS
Exploits16References20
OPENSUSE Linux
OPENSUSE Linux
added 2020/10/29 12:0 a.m.42 views

Security update for tensorflow2 (moderate)

openSUSE Security Update: Security update for tensorflow2 Announcement ID: openSUSE-SU-2020:1766-1 Rating: moderate References: 1173314 1175099 1175789 1177022 Cross-References: CVE-2020-15190 CVE-2020-15191 CVE-2020-15192 CVE-2020-15193 CVE-2020-15194 CVE-2020-15195 CVE-2020-15202 CVE-2020-15203...

9.8CVSS7.1AI score0.01411EPSS
Exploits16References4
Tenable Nessus
Tenable Nessus
added 2020/10/28 12:0 a.m.39 views

RHEL 6 : chromium-browser (RHSA-2020:4351)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4351 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 86.0.4240.111. Security Fixes:...

9.6CVSS8.6AI score0.93031EPSS
Exploits5References12
Veracode
Veracode
added 2020/10/25 12:34 p.m.46 views

Heap Buffer Overflow

FreeType is vulnerable to heap-based buffer overflow due to integer truncation in LoadSBitPng...

9.6CVSS3AI score0.93031EPSS
Exploits2References12Affected Software4
Tenable Nessus
Tenable Nessus
added 2020/10/02 12:0 a.m.28 views

RHEL 7 : Red Hat Virtualization (RHSA-2020:4114)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4114 advisory. ovirt-ansible-repositories is an Ansible role used to set up the repositories required for oVirt engine or host installation. The openvswitc...

6.7CVSS7.4AI score0.00087EPSS
Exploits0References11
NVD
NVD
added 2020/09/25 7:15 p.m.12 views

CVE-2020-15202

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

9CVSS0.00502EPSS
Exploits1References5
OSV
OSV
added 2020/09/25 7:15 p.m.17 views

CVE-2020-15202

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

9CVSS8.9AI score
Exploits0References5
PyPA
PyPA
added 2020/09/25 7:15 p.m.4 views

PYSEC-2020-125

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

9CVSS6.9AI score0.00502EPSS
Exploits1References5Affected Software1
Prion
Prion
added 2020/09/25 7:15 p.m.13 views

Integer overflow

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

6.8CVSS8.8AI score0.00502EPSS
Exploits1References5Affected Software2
Rows per page
Query Builder