OPENSUSE-SU-2021:1198-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ in Imf25:Header:operator - CVE-2021-20300 bsc1188458: Fixed Integer-overflow in Imf25:hufUncompress - CVE-2021-20302...

openSUSE 15 Security Update : openexr (openSUSE-SU-2021:2793-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2793-1 advisory. - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed b...

SUSE-SU-2021:2793-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-20298 bsc1188460: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 bsc1188459: Fixed Null-dereference READ in Imf25:Header:operator - CVE-2021-20300 bsc1188458: Fixed Integer-overflow in Imf25:hufUncompress - CVE-2021-20302...

PT-2022-9180

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description A flaw in OpenEXR's hufDecode functionality allows an attacker to trigger an undefined right shift error by passing a crafted file to be processed by OpenEXR. The highest threat from this iss...

Wake up! Identify API Vulnerabilities Proactively, From Production Back to Code

After more than 20 years in the making, now it's official: APIs are everywhere. In a 2021 survey, 73% of enterprises reported that they already publish more than 50 APIs, and this number is constantly growing. APIs have crucial roles to play in virtually every industry today, and their importance...

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking at Norbert Wiener in the 21st Century, a virtual conference hosted by The IEEE Society on Social Implications of Technology SSIT, July 23-25, 2021. I’m speaking at DEFCON 29, August 5-8, 2021. Im speaking via Internet ...

Debian DLA-2701-1 : openexr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2701 advisory. - A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can...

UVI-2021-1001039 gpio: wcd934x: Fix shift-out-of-bounds error

gpio: wcd934x: Fix shift-out-of-bounds error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1001039 gpio: wcd934x: Fix shift-out-of-bounds error

gpio: wcd934x: Fix shift-out-of-bounds error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1000961 gpio: wcd934x: Fix shift-out-of-bounds error

gpio: wcd934x: Fix shift-out-of-bounds error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...

PT-2021-25510

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.12.10 Description: A shift-out-of-bounds error was identified in the gpio: wcd934x component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux...

PT-2021-29426

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description A shift-out-of-bounds error was identified in the gpio: wcd934x component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25432

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: A shift-out-of-bounds error was identified in the gpio: wcd934x component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-29504

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description A shift-out-of-bounds error was identified in the gpio: wcd934x component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

CVE-2021-34185

Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwavbytestou32 in miniaudio.h...

CVE-2021-34185

Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwavbytestou32 in miniaudio.h...

CVE-2021-34185: Buffer Copy without Checking Size of Input

Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwavbytestou32 in miniaudio.h...

Miniaudio 安全漏洞

Miniaudio is a single-file audio playback and capture library written in C. A buffer overflow vulnerability exists in Miniaudio version 0.10.35. The vulnerability stems from an out-of-bounds left shift of drwavbytestou32 in miniaudio.h. No detailed vulnerability details are currently available."...

Intentional Flaw in GPRS Encryption Algorithm GEA-1

General Packet Radio Service GPRS is a mobile data standard that was widely used in the early 2000s. The first encryption algorithm for that standard was GEA-1, a stream cipher built on three linear-feedback shift registers and a non-linear combining function. Although the algorithm has a 64-bit...