FreeBSD : libxml -- multiple vulnerabilities (f5abafc0-fcf6-11ea-8758-e0d55e2a8bf9)

CVE mitre reports : CVE-2019-20388 xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. CVE-2020-7595 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. CVE-2020-24977 GNOME project libxml2...

openSUSE Security Update : libqt4 (openSUSE-2020-1501)

This update for libqt4 fixes the following issues : - Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 - Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 - Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 - Fix crash when parsin...

OPENSUSE-SU-2020:1501-1 Security update for libqt4

This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...

OPENSUSE-SU-2020:1500-1 Security update for libqt4

This update for libqt4 fixes the following issues: Fix buffer over-read in readxbmbody boo1176315, CVE-2020-17507 Fix 'double free or corruption' in QXmlStreamReader boo1118595, CVE-2018-15518 Fix QBmpHandler segfault on malformed BMP file boo1118596, CVE-2018-19873 Fix crash when parsing malform...

Security update for libqt4 (moderate)

openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1501-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Leap 15.2 An update that...

Security update for libqt4 (moderate)

openSUSE Security Update: Security update for libqt4 Announcement ID: openSUSE-SU-2020:1500-1 Rating: moderate References: 1118595 1118596 1118599 1121214 1176315 Cross-References: CVE-2018-15518 CVE-2018-19869 CVE-2018-19873 CVE-2020-17507 Affected Products: openSUSE Backports SLE-15-SP1 An upda...

Information Disclosure

graphicsmagick is vulnerablet o information disclosure. The DescribeImage function of the magick/describe.c file contains a heap-based buffer over-read bug...

Arbitrary Code Execution

dhcpcd5 is vulnerable to arbitrary code execution. The vulnerability exists through a buffer over-read in the D6OPTIONPDEXCLUDE feature...

Denial Of Service (DoS)

gimp is vulnerable to denial of service DoS. The vulnerability exists through a stack-based buffer over-read in xcfloadstream in app/xcf/xcf.c when there is no \0 character after the version string...

Denial Of Service (DoS)

elfutils is vulnerable to denial of service DoS. The vulnerability exists as a heap-based buffer over-read could occur through the handlegnuhash function in readelf.c with an ELF file...

Arbitrary Code Execution

gpac is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer over-read could occur through the function hdlrdump in isomedia/boxdump.c...

Denial Of Service (DoS)

tnef is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read in strdup, allowing an attacker may be able to write to the victim's .ssh/authorizedkeys file through an e-mail message with a crafted winmail.dat application/ms-tnef attachment...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap-based buffer over-read in ReadRGBImage of coders/rgb.c...

Buffer Over-read

graphicsmagick:xenial is vulnerable to buffer over-read. The ReadSUNImage function in coders/sun.c has a colormap heap-based buffer over-read...

Denial Of Service (DoS)

The checksysvhash function in elflint.c allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file...

Buffer Over-read

GIMP is vulnerable to a heap-based buffer over-read. It is due to a flaw in loadimage in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data...

Heap Buffer Over-read

binutils:bionic is vulnerable to heap buffer over-read in dexpression1 in cp-demangle.c after many recursive calls...

Buffer Over-read

GraphicsMagick is vulnerable to a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...

Denial Of Service (DoS)

Artifex jbig2dec is vulnerable to denial of service. A heap-based buffer over-read in the jbig2decodesymboldict function in jbig2symboldict.c in libjbig2dec.a allows an attacker to crash the application via a malicious .jb2 file...

Heap Buffer Over-read

vlc:bionic is vulnerable to heap buffer over-read. The xiphSplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file...