CVE-2020-35133

irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at iview32+0xdb60...

opensc: Incorrect read operation during parsing of a SETCOS file attribute

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute...

squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash

A flaw was found in squid. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed, it is added via addStackElement. addStackElement has a check for the number of elements in this buffer,...

sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...

Moderate: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

Denial Of Service (DoS)

sqlite3 is vulnerable to denial of service DoS. The vulnerability exists as the WITH stack continues to unwind even after a parsing error in selectExpander in select.c...

EulerOS Virtualization 3.0.6.0 : sqlite (EulerOS-SA-2020-1764)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - osunix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to...

PT-2020-14407 · Mediaarea +3 · Mediainfo +3

Name of the Vulnerable Software and Affected Versions: MediaInfo versions 20.03 Description: The issue is a stack-based buffer over-read in the Streams Fill PerStream function in Multiple/File MpegPs.cpp, which occurs during MpegPs parsing and can be described as an off-by-one error...

PT-2020-5906 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg versions 2.8 through 4.2.3 Description: The issue is related to a use-after-free error in the parse playlist function of the libavformat library, specifically when handling a crafted EXTINF duration in an m3u8 file. This error occurs...

OpenDMARC has an unspecified vulnerability

OpenDMARC is an open source implementation of the DMARC Domain Based Message Authentication, Reporting and Conformance specification. OpenDMARC suffers from an unspecified vulnerability that stems from the program not properly parsing SPF/DKIM authentication results. An attacker could exploit the...

DEBIAN-CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the...

NETGEAR XR500 and XR700 Injection Vulnerability

The NETGEAR XR700 and NETGEAR XR500 are both wireless routers from NETGEAR. An injection vulnerability exists in the NETGEAR XR500 prior to version 2.3.2.56 and the XR700 prior to version 1.0.1.20, which can be exploited by an attacker to cause the system or product to generate an error in the wa...

EulerOS 2.0 SP3 : sqlite (EulerOS-SA-2020-1434)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a...

qt5-qtbase: Double free in QXmlStreamReader

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document...

EulerOS 2.0 SP5 : sqlite (EulerOS-SA-2020-1132)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2019:1782-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2019-20218

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...

CVE-2019-20218

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...

CVE-2019-20218

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...

CVE-2019-20218

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error...