Medium: SDL

Issue Overview: SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c. CVE-2019-7572 SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c inside...

CVE-2020-4767

IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906...

Medium: expat

Issue Overview: It was discovered that the "setElementTypePrefix" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of...

Low: libsndfile

Issue Overview: An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service. CVE-2018-19662 Affected Packages: libsndfile Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this F...

SUSE-SU-2020:3030-1 Security update for SDL

This update for SDL fixes the following issues: Secuirty issue fixed: - CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit bsc1141844...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58751)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the Server: DML component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this vulnerability to take over MySQL Server...

Remote Code Execution (RCE)

kernel is vulnerable to remote code execution RCE. The vulnerability exists through a buffer over-write in vgaconscroll...

Scientific Linux Security Update : expat on SL7.x x86_64 (20201001)

Security Fixes : - expat: large number of colons in input makes parser consume high amount of resources, leading to DoS CVE-2018-20843 - expat: heap-based buffer over-read via crafted XML input CVE-2019-15903 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : SDL on SL7.x x86_64 (20201001)

Security Fixes : - SDL: buffer over-read in IMAADPCMnibble in audio/SDLwave.c CVE-2019-7572 - SDL: heap-based buffer overflow in function MSADPCMdecode in audio/SDLwave.c CVE-2019-7575 - SDL: heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c CVE-2019-7636 - SDL: heap-based buffer...

Scientific Linux Security Update : libsndfile on SL7.x x86_64 (20201001)

Security Fixes : - libsndfile: buffer over-read in the function i2alawarray in alaw.c CVE-2018-19662 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141650; scriptversion"1.3";...

EulerOS Virtualization 3.0.2.2 : ghostscript (EulerOS-SA-2020-2232)

According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of servic...

SDL security update

CentOS Errata and Security Advisory CESA-2020:3868 An update for SDL is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

libsndfile security update

CentOS Errata and Security Advisory CESA-2020:3922 An update for libsndfile is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CentOS 7 : SDL (RHSA-2020:3868)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3868 advisory. - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMAADPCMnibble in audio/SDLwave.c. CVE-2019-7572 - SDL...

CentOS 7 : expat (RHSA-2020:3952)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3952 advisory. - In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amoun...

RHEL 8 : kernel-rt (RHSA-2020:4289)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4289 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CentOS 7 : libsndfile (RHSA-2020:3922)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3922 advisory. - An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alawarray in alaw.c that will lead to a denial of service...

[ASA-202010-5] lua: arbitrary code execution

Arch Linux Security Advisory ASA-202010-5 ========================================= Severity: High Date : 2020-10-18 CVE-ID : CVE-2020-15888 CVE-2020-15889 Package : lua Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1207 Summary ======= The package lua...

CVE-2020-16897

An information disclosure vulnerability exists when NetBIOS over TCP NBT Extensions NetBT improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker wou...