EulerOS Virtualization 2.5.3 : ghostscript (EulerOS-SA-2019-1177)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was discovered in one of Ghostscript's memory allocation routines. A remote attacker could possibly...

EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1242)

According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...

EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1233)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...

The vulnerability of the read_long_names() function in the modification and analysis tools for binary ELF files, Elfutils, allows a perpetrator to cause a service failure.

The vulnerability of the readlongnames function in the ELF file modification and analysis utility Elfutils is related to excessive memory allocation. Exploiting this vulnerability can allow an attacker to trigger an “out-of-memory” exception, resulting in a service failure...

DEBIAN-CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

Design/Logic Flaw

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

UBUNTU-CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

CVE-2019-10723

CVE-2019-10723 affects PoDoFo 0.9.6 via PdfPagesTreeCache.cpp, where an attempted memory allocation is excessive because nInitialSize is not validated. This memory handling issue could lead to a denial of service or resource exhaustion on affected systems. Several advisories document the same CVE...

CVE-2019-10723

An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated...

Denial Of Service (DoS)

libpng.so is vulnerable to denial of service DoS. The vulnerability exists due to improper handling of a memory allocation in the function pngcreateinfostruct in png.c...

PT-2019-12012 · Podofo +5 · Podofo +5

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: An issue was discovered in the PdfPagesTreeCache class where there is an attempted excessive memory allocation due to the lack of validation of the nInitialSize variable. Recommendations: For PoDoFo version...

USN-3931-1: Linux kernel vulnerabilities

M. Vefa Bicakci and Andy Lutomirski discovered that the kernel did not properly set up all arguments to an error handler callback used when running as a paravirtualized guest. An unprivileged attacker in a paravirtualized guest VM could use this to cause a denial of service guest VM crash...

Monero: Computing hash of crafted block leads to crash in tree_hash()

I'm not sure how to test this against against an actual Monero instance, so I'm instead showing an isolated PoC: c include int mainvoid cryptonote::block b = AUTOVALINITb; for sizet i = 0; i baoss; std::string s; if ::serialization::serializeba, b == true s = oss.str; else return 0; / Uncomment t...

openSUSE Security Update : binutils (openSUSE-2019-808)

This update for binutils to version 2.31 fixes the following issues : These security issues were fixed : - CVE-2017-15996: readelf allowed remote attackers to cause a denial of service excessive memory allocation or possibly have unspecified other impact via a crafted ELF file that triggered a...

openSUSE Security Update : ImageMagick (openSUSE-2019-758)

This update for ImageMagick fixes the following security issues : - CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel function leading to DoS bsc1106989 - CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS bsc1106858. -...