CVE-2018-10767

CVE-2018-10767 is a vulnerability in libgxps up to version 0.3.0, caused by a stack-based buffer over-read in gxps_images_guess_content_type (gxps-images.c) when negative return values from g_input_stream_read are not rejected. A crafted input can trigger a remote denial of service. The connected...

CVE-2018-10767

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

PT-2018-10093

Name of the Vulnerable Software and Affected Versions libgxps versions prior to 0.3.1 Description The issue is related to a stack-based buffer over-read in the function gxps images guess content type of gxps-images.c. This occurs because the function does not properly handle negative return value...

CVE-2018-10767: Out-of-bounds Read

There is a stack-based buffer over-read in calling GLib in the function gxpsimagesguesscontenttype of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a ginputstreamread call. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

UBUNTU-CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

Heap overflow

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

CVE-2018-10733

The CVE-2018-10733 issue is a heap-based buffer over-read in the libgxps component, specifically in ft_font_face_hash of gxps-fonts.c, affected through libgxps up to version 0.3.0. A crafted input can enable a remote denial of service. Connected advisories from multiple distributions (e.g., SUSE,...

PT-2018-10071

Name of the Vulnerable Software and Affected Versions libgxps versions prior to 0.3.1 Description The issue is related to a heap-based buffer over-read in the ft font face hash function of gxps-fonts.c. This can be triggered by a crafted input, potentially leading to a remote denial of service...

CVE-2018-10733: Out-of-bounds Read

There is a heap-based buffer over-read in the function ftfontfacehash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack...

Debian: Security Advisory (DLA-1054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libgxps caseless_hash DoS

The vulnerability of the caselesshash function in the libgxps library exists due to the swapping of a null pointer. Exploiting this vulnerability could allow an attacker acting locally to cause a service failure...

Updated libgxps packages fix security vulnerability

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a denial of service attack CVE-2017-11590...

MGASA-2017-0318 Updated libgxps packages fix security vulnerability

There is a NULL pointer dereference in the caselesshash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a denial of service attack CVE-2017-11590...

Fedora Update for libgxps FEDORA-2017-0ca78fabc5

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1054-1 : libgxps security update

It was discovered that there was a NULL pointer dereference in libgxps, a library to handle XML Paper Specification specifications. Specially crafted input could lead to a remote denial of service attack. For Debian 7 'Wheezy', this issue has been fixed in libgxps version 0.2.2-2+deb7u1. We...