CVE-2017-15954

CVE-2017-15954 affects the bchunk package (BinChunker) versions 1.2.0 and 1.2.1. The vulnerability is a heap-based buffer overflow that can cause a crash (and an invalid free) when processing a malformed CUE (.cue) file. Descriptions across multiple sources confirm the issue and its association w...

CVE-2017-15954

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

CVE-2017-15954: Improper Restriction of Operations within the Bounds of a Memory Buffer

bchunk related to BinChunker 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow with a resultant invalid free and crash when processing a malformed CUE .cue file...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

Design/Logic Flaw

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

PYSEC-2017-130

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

PT-2017-19367

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by an invalid free in the Image class in image.cpp, which results in a Segmentation fault. A crafted input can lead to a denial of service attack. Recommendations For Exiv2 version 0.26, at th...

CVE-2017-14857

Exiv2 0.26 contains an invalid free in Image::printIFDStructure (image.cpp) causing a segmentation fault that can lead to denial of service. Public advisories (Mageia/ENISA OSV) confirm this CVE-2017-14857 issue and note that fixes were delivered in newer Exiv2 packages (e.g., MGA6 patch) and adv...

CVE-2017-14857

In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service attack...

PT-2017-13729

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by an invalid free in the Image class in image.cpp, which can lead to a Segmentation fault. A crafted input can exploit this, resulting in a denial of service attack. Recommendations For Exiv2...

SUSE SLED12 / SLES12 Security Update : icu (SUSE-SU-2017:2318-1)

icu was updated to fix two security issues. These security issues were fixed : - CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU used an integer data type that is...

CVE-2017-13737

There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack...

UBUNTU-CVE-2017-13737

There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack...

CVE-2017-13737

There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack...

CVE-2017-13737

There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack...

Design/Logic Flaw

In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service...

CVE-2017-12671

In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service...

DEBIAN-CVE-2017-12671

In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service...

CVE-2017-12671

In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service...