LibRaw security update

An update is available for LibRaw. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibRaw is a library for reading RAW files obtained from digital photo cameras...

EUVD-2019-5586

Malware in sbrugna...

EUVD-2018-4087

Malware in sbrugna...

EUVD-2018-3023

Malware in sbrugna...

EUVD-2018-3022

Malware in sbrugna...

EUVD-2017-5741

Malware in sbrugna...

EUVD-2018-3536

Malware in sbrugna...

EUVD-2018-6758

Malware in sbrugna...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

CVE-2018-11507

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

CVE-2017-14232

The readchunk function in flif-dec.cpp in Free Lossless Image Format FLIF 0.3 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted flif file...

CVE-2017-14232

The readchunk function in flif-dec.cpp in Free Lossless Image Format FLIF 0.3 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted flif file...

CVE-2017-14232

CVE-2017-14232 affects Free Lossless Image Format (FLIF) 0.3. The vulnerability lies in the read_chunk function in flif-dec.cpp, allowing remote attackers to cause a denial of service via a crafted FLIF file, by triggering an invalid memory read and application crash. The connected documents conf...

PT-2019-7966

Name of the Vulnerable Software and Affected Versions Free Lossless Image Format FLIF version 0.3 Description The issue concerns a denial of service caused by an invalid memory read and application crash. This can be triggered by remote attackers via a crafted flif file, specifically exploiting t...

CVE-2017-14232: Undefined Security Weakness

The readchunk function in flif-dec.cpp in Free Lossless Image Format FLIF 0.3 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted flif file...

Free Lossless Image Format Buffer Overflow Vulnerability

Free Lossless Image Format FLIF is a lossless image format. A buffer overflow vulnerability exists in imagesavepng in the image/image-png.cpp file in FLIF version 0.3. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

PT-2019-13650

Name of the Vulnerable Software and Affected Versions Free Lossless Image Format FLIF version 0.3 Description An issue was discovered in the image save png function in image/image-png.cpp, allowing attackers to trigger a heap-based buffer over-read in libpng via a crafted flif file. Recommendatio...

CVE-2019-14373: Out-of-bounds Read

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...