Security Bulletin: CVE-2022-27452

Summary MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemcmpfunc.cc, which is backported and fixed in 10.5.16 Vulnerability Details CVEID:CVE-2022-27452 DESCRIPTION: MariaDB Server is vulnerable to a denial of service, caused by a flaw in the...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in /multiarch/memset-vec-unaligned-erms...

PT-2022-22581 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the extractFrame function at /readers/swf.c. Recommendations: At the moment, there is no information about a newer version that...

JPEGDEC 安全漏洞

JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. A security vulnerability exists in JPEGDEC that stems from a segmentation error in the TIFFSHORT module of the /src/jpeg.inl file...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a code issue vulnerability that stems from Lexer::getObjObject in /xpdf/Lexer.cc contains a segmentation violation...

PT-2022-23231 · Tifig · Tifig

Name of the Vulnerable Software and Affected Versions: tifig version 0.2.2 Description: A segmentation violation was discovered in tifig via the getType function at /common/bbox.cpp. Recommendations: For version 0.2.2, consider disabling the getType function as a temporary workaround until a patc...

PT-2022-22480 · Jpegdec · Jpegdec

Name of the Vulnerable Software and Affected Versions: JPEGDEC affected versions not specified Description: A segmentation fault was discovered in JPEGDEC via fseek at /libio/fseek.c. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

JPEGDEC 安全漏洞

JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. A security vulnerability exists in JPEGDEC that stems from a segmentation error in the fseek module of the /src/jpeg.inl file...

PT-2022-22854 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation was discovered in OTFCC via the /release-x64/otfccdump+0x6babea endpoint. Recommendations: For OTFCC version 0.10.4, consider restricting access to the /release-x64/otfccdump+0x6babea...

PT-2022-22861 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation was discovered in OTFCC via the /release-x64/otfccdump+0x703969 endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about a newer version that...

PT-2022-22858 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation issue was discovered in OTFCC. The issue is related to the /release-x64/otfccdump+0x65f724 endpoint. Recommendations: For OTFCC version 0.10.4, consider avoiding the use of the...

PT-2022-22855 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation was discovered in OTFCC via the /release-x64/otfccdump+0x4fbbb6 endpoint. Recommendations: For OTFCC version 0.10.4, at the moment, there is no information about a newer version that...

OTFCC 代码问题漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x4fe9a7 file...

Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-228-01)

The version of mariadb installed on the remote host is prior to 10.5.17 / 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-228-01 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant...

PT-2022-22575 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the DCTStream::getChar function at /xpdf/Stream.cc. Recommendations: At the moment, there is no information about a newer version th...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from a segmentation violation contained in DCTStream::getChar in /xpdf/Stream.cc...

PT-2022-24302 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the DCTStream::readMCURow function at /xpdf/Stream.cc. Recommendations: At the moment, there is no information about a newer version that...

PT-2022-24304 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the DCTStream::getChar function at /xpdf/Stream.cc. This issue affects the DCTStream::getChar function, which is located in the...

PT-2022-22570 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the /multiarch/memset-vec-unaligned-erms.S API endpoint. Recommendations: At the moment, there is no information about a newer versi...

PT-2022-22569 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the gfxline getbbox function at /lib/gfxtools.c. Recommendations: At the moment, there is no information about a newer version that...