PT-2022-24303 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue was identified in XPDF commit ffaf11c. Recommendations: At the moment, there ...

OTFCC 代码问题漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A code issue vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x6b6a8f file...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x5266a8 file...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the file /multiarch/memmove-vec-unaligned-erms...

PT-2022-22857 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation was discovered in OTFCC via the /multiarch/memmove-vec-unaligned-erms.S endpoint. Recommendations: For OTFCC version 0.10.4, consider restricting access to the...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x6badae file...

PT-2022-22859 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation issue was discovered in OTFCC. The issue can be triggered via the /release-x64/otfccdump+0x5266a8 endpoint. Recommendations: For OTFCC version 0.10.4, consider restricting access to t...

PT-2022-22860 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC version 0.10.4 Description: A segmentation violation was discovered in OTFCC, which can be triggered via the /release-x64/otfccdump+0x6b6a8f endpoint. Recommendations: For version 0.10.4, at the moment, there is no information about a...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /release-x64/otfccdump+0x703969 file...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in the extractFrame of the /readers/swf.c file...

OTFCC 代码问题漏洞

OTFCC is a C library and utility program from Caryll Open Source. It is used to parse and write OpenType font files. A security vulnerability exists in OTFCC version 0.10.4, which stems from a segmentation violation in the /x8664-linux-gnu/libc.so.6+0xbb384 file...

OSV-2022-715 Segv on unknown address in jpeg_read_scanlines

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50217 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.htmldecode-jpeg-compressed-blp1-data-in-original-mode Crash type: Segv on unknown address Crash state: jpegreadscanlines ImagingJpegDecode decode...

MariaDB 10.7.0 < 10.7.5 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.7.5 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

GLSA-202208-22 : xterm: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-22 xterm: Multiple Vulnerabilities - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence. CVE-2021-27135 ...

GLSA-202208-16 : faac: Denial of service

The remote host is affected by the vulnerability described in GLSA-202208-16 faac: Denial of service - An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability causes a segmentation fault and...

Feature Spotlight: Extending Zero Trust Segmentation to the MacOS

Announcing our new agent for MacOS endpoints. Of all the leading Zero Trust segmentation providers, Akamai is the only vendor to support MacOS...

MariaDB 10.6.0 < 10.6.9 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.6.9 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

SUSE SLED15: libncurses5 / libncurses5-32bit / libncurses6 / libncurses6-32bit / etc (SUSE-SU-2022:2717-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2717-1 advisory. - CVE-2022-29458: Fixed segfaulting out-of-bounds read in convertstrings in tinfo/readentry.c bsc1198627...

PT-2022-37173 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state includes functions such as ndpi free flow data, ndpi flow fre...

MariaDB 10.9.0 < 10.9.2 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.9.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.9.2 advisory. - MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at...