CVE-2019-10054

An issue was discovered in Suricata 4.1.3. The function processreplyrecordv3 lacks a check for the length of reply.data. It causes an invalid memory access and the program crashes within the nfs/nfs3.rs file...

CVE-2019-10054

An issue was discovered in Suricata 4.1.3. The function processreplyrecordv3 lacks a check for the length of reply.data. It causes an invalid memory access and the program crashes within the nfs/nfs3.rs file...

Arbitrary Code Execution

php is vulneable to arbitrary code execution. Invalid memory access in the function xmlrpcdecode allows an attacker to execute arbitrary code on the system via malicious input...

RHEL 7 : exiv2 (RHSA-2019:2101)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2101 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The...

exiv2: invalid memory access in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp

In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp allows remote attackers to cause a denial of service invalid memory access via a crafted file...

advancecomp: denial of service in function adv_png_unfilter_8 in lib/png.c

An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have unspecified other...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

UBUNTU-CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

CVE-2019-12802

In radare2 through 3.5.1, the rcccontext function of libr/egg/egglang.c mishandles changing context. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact invalid memory access in regglangparsechar; invalid free in rccpusharg...

PYSEC-2019-222

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

SUSE SLES12 Security Update : php5 (SUSE-SU-2019:0985-1)

This update for php5 fixes the following issues : Security issues fixed : CVE-2019-9024: Fixed a vulnerability in xmlrpcdecode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas bsc1126821. CVE-2019-9020: Fixed a heap out of bounds in xmlrpcdeco...

EulerOS Virtualization 2.5.3 : php (EulerOS-SA-2019-1265)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the...

EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1146)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an...

CVE-2019-9877

There is an invalid memory access vulnerability in the function TextPage::findGaps located at TextOutputDev.c in Xpdf 4.01, which can for example be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have...

CVE-2019-9878

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by for example sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service Segmentation...

CVE-2019-9588

There is an Invalid memory access in gAtomicIncrement located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to for example the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

CVE-2019-9588

There is an Invalid memory access in gAtomicIncrement located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to for example the pdftops binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...