12945 matches found
OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2020-1003)
According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory...
EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2020-1026)
According to the version of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very lar...
SQLite report about CVE-2020-11656
Malicious SQL statement causes read-only use-after-free of memory allocation if SQLite is compile with -DSQLITEDEBUG. Does not affect release builds. details...
CVE-2019-20201
An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...
CVE-2019-20201
CVE-2019-20201 affects ezXML 0.8.3–0.8.6. The issue arises in the ezxml_parse_* functions, where XML entities are mishandled, causing an infinite loop that triggers repeated memory allocations. Exploitation details are not provided in the connected documents. The SUSE/Mageia/OpenVAS entries refer...
MGASA-2019-0415 Updated exiv2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset. CVE-2019-13108 An integer overflow in Exiv2...
Updated exiv2 packages fix security vulnerabilities
The updated packages fix security vulnerabilities: An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset. CVE-2019-13108 An integer overflow in Exiv2...
NewStart CGSL CORE 5.05 / MAIN 5.05 : elfutils Multiple Vulnerabilities (NS-SA-2019-0258)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has elfutils packages installed that are affected by multiple vulnerabilities: - dwarfgetaranges in dwarfgetaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service heap-based buffer...
CVE-2019-20201
An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxmlparse functions mishandle XML entities, leading to an infinite loop in which memory allocations occur...
NewStart CGSL CORE 5.05 / MAIN 5.05 : exiv2 Multiple Vulnerabilities (NS-SA-2019-0229)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has exiv2 packages installed that are affected by multiple vulnerabilities: - In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the == 0x1c case...
CVE-2019-18679
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information...
CVE-2019-20019
An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...
DEBIAN-CVE-2019-20019
An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...
CVE-2019-20019
An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...
CVE-2019-20019
An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...
Design/Logic Flaw
An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...
UBUNTU-CVE-2019-20019
An attempted excessive memory allocation was discovered in MatVarRead5 in mat5.c in matio 1.5.17...