LibRaw security update

An update is available for LibRaw. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibRaw is a library for reading RAW files obtained from digital photo cameras...

EUVD-2018-3536

Malware in sbrugna...

EUVD-2018-3022

Malware in sbrugna...

EUVD-2018-3023

Malware in sbrugna...

EUVD-2019-5586

Malware in sbrugna...

EUVD-2018-4087

Malware in sbrugna...

EUVD-2017-5741

Malware in sbrugna...

EUVD-2018-6758

Malware in sbrugna...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

CVE-2018-11507

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

CVE-2017-14232

The readchunk function in flif-dec.cpp in Free Lossless Image Format FLIF 0.3 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted flif file...

CVE-2017-14232

CVE-2017-14232 affects Free Lossless Image Format (FLIF) 0.3. The vulnerability lies in the read_chunk function in flif-dec.cpp, allowing remote attackers to cause a denial of service via a crafted FLIF file, by triggering an invalid memory read and application crash. The connected documents conf...

Free Lossless Image Format Buffer Overflow Vulnerability

Free Lossless Image Format FLIF is a lossless image format. A buffer overflow vulnerability exists in imagesavepng in the image/image-png.cpp file in FLIF version 0.3. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

Free Lossless Image Format Denial of Service Vulnerability (CNVD-2018-11452)

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'TransformPaletteC::process' function in the transform/paletteC.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability to cause a denial of servic...

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

CVE-2018-12109

CVE-2018-12109 affects Free Lossless Image Format (FLIF) 0.3. The vulnerability is in the TransformPaletteC::process function within transform/palette_C.hpp, where crafted PAM image files can trigger a heap-based buffer overflow, leading to a denial of service (application crash) and possibly oth...

CVE-2018-11507

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...

Double free

An issue was discovered in Free Lossless Image Format FLIF 0.3. An attacker can trigger a long loop in imageloadpnm in image/image-pnm.cpp...