12876 matches found
EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2024-1095)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task,...
EulerOS Virtualization 2.9.0 : libssh (EulerOS-SA-2023-2985)
According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated...
EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2024-1042)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in...
EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2023-3343)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c...
Design/Logic Flaw
CEF Chromium Embedded Framework is a simple framework for embedding Chromium-based browsers in other applications. CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory does not check the size of the shared memory, which leads to out-of-bounds read outside the sandbox. This vulnerability was patche...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
UBUNTU-CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
Design/Logic Flaw
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
SUSE CVE-2023-47995
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImageAllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service...
CVE-2023-37644
CVE-2023-37644 affects SWFTools 0.9.2 (772e55a). The issue is in the PNG handling path: png_read_chunk in lib/png.c, where a crafted document can trigger a large memory allocation. Connected sources corroborate the same description across multiple advisories (e.g., Red Hat, Ubuntu, NVD/NVDB deriv...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
libarchive: NULL pointer dereference in archive_write.c
A flaw was found in libarchive. A missing check of the return value of the calloc function can cause a NULL pointer dereference in an out-of-memory condition or when a memory allocation limit is reached, resulting in the program linked with libarchive to crash...
RHEL 8 : container-tools:4.0 (RHSA-2024:0121)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0121 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang:...
CVE-2023-47995
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImageAllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service...
CVE-2023-47995
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImageAllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service...