Heap overflow

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the...

SUSE SLED15 / SLES15 Security Update : ncurses (SUSE-SU-2019:2997-1)

This update for ncurses fixes the following issues : Security issues fixed : CVE-2019-17594: Fixed a heap-based buffer over-read in the ncfindentry function bsc1154036. CVE-2019-17595: Fixed a heap-based buffer over-read in the fmtentry function bsc1154037. Non-security issue fixed: Removed...

SUSE-SU-2019:2997-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issues fixed: - CVE-2019-17594: Fixed a heap-based buffer over-read in the ncfindentry function bsc1154036. - CVE-2019-17595: Fixed a heap-based buffer over-read in the fmtentry function bsc1154037. Non-security issue fixed: - Removed...

openSUSE Security Update : ImageMagick (openSUSE-2019-2519)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. - CVE-2019-15141: Fixed a divide-by-zero...

jhead buffer over-read vulnerability

jhead is a command line driven utility for extracting digital camera settings from the Exif format files used by many digital cameras. A buffer over-read vulnerability exists in ReadJpegSections and processSOFn in jpgfile.c in jhead 3.03, which can be exploited by an attacker to cause a denial of...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

UBUNTU-CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-19035

jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and processSOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file...

CVE-2019-19035

CVE-2019-19035 affects jhead 3.03, with a heap-based buffer over-read in ReadJpegSections and process_SOFn (jpgfile.c) that can cause a Denial of Service when opening a specially crafted JPEG. Public advisories (Mageia MGASA-2020-0014; Fedora advisories) indicate the fix upgrades to jhead 3.04. O...

PT-2019-15765 · Matthew Petroff +3 · Jhead +3

Name of the Vulnerable Software and Affected Versions: jhead version 3.03 Description: The issue is related to a heap-based buffer over-read, which can lead to denial of service. The components ReadJpegSections and process SOFn in jpgfile.c are affected. The attack vector involves opening a...

OPENSUSE-SU-2019:2519-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. - CVE-2019-15141: Fixed a divide-by-zero...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2019:2519-1 Rating: moderate References: 1146065 1146068 1146211 1146212 1146213 1151781 1151782 1151783 1151784 1151785 1151786 Cross-References: CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140...

Security update for ImageMagick (moderate)

openSUSE Security Update: Security update for ImageMagick Announcement ID: openSUSE-SU-2019:2515-1 Rating: moderate References: 1146065 1146068 1146211 1146212 1146213 1151781 1151782 1151783 1151784 1151785 1151786 Cross-References: CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140...

openSUSE Security Update : ImageMagick (openSUSE-2019-2515)

This update for ImageMagick fixes the following issues : Security issues fixed : - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. - CVE-2019-15141: Fixed a divide-by-zero...

CVE-2019-18680

A flaw was found in the Linux kernel's implementation of RDS over TCP. A system that has the rdstcp kernel module that is loaded through an autoload via a local process running listen, or manual loading, could possibly cause a kernel panic. Mitigation While this is a network protocol being...

thunderbird security update

CentOS Errata and Security Advisory CESA-2019:3756 An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

FreeBSD : libmad -- multiple vulnerabilities (b48e7b14-052a-11ea-a1de-53b029d2b061)

National Vulnerability Database : CVE-2017-8372: The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file. CVE-2017-8373: The madlayerIII function...

CVE-2018-21029

A flaw in systemd-resolved was found to incorrectly verify certificates of a DNS resolver used for DNS Over TLS when the DNSOverTLS option is set to yes. A remote attacker in the network path between the vulnerable system and the DNS resolver may use this flaw to perform a man-in-the-middle attac...