PT-2021-6542

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the pool disabled solvable function in the src/repo.h component of the libsolv library. This vulnerability allows attackers to cause a Deni...

PT-2020-6626

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the prune to recommended function in src/policy.c of the libsolv library. This vulnerability allows attackers to cause a Denial of Service...

PT-2020-6436

Name of the Vulnerable Software and Affected Versions libsolv affected versions not specified Description The issue is related to a buffer overflow vulnerability in the testcase read function of the src/testcase.c component in the Libsolv library. This vulnerability could allow a remote attacker ...

WS-2020-0306

OpenSC before 0.22.0-rc1 is vulnerable to stack-use-after-return in insertpin on src/libopensc/pkcs15-tcos.c...

WS-2020-0309

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in flbsdscatutf8 on src/flbsds.c...

WS-2020-0307

Fluent Bit before v1.7.2 is vulnerable to heap-buffer-overflow in processchunkeddata on src/flbhttpclient.c...

CVE-2020-15710 Potential double-free in pulseaudio

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

CVE-2020-15710

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

CVE-2020-15710: Double Free

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

WS-2020-0322

The crash method MatVarReadNextInfo5 in the file src/mat5.c that in the library matio has been fixed because of illegal memory access by addition of readstrict...

WS-2020-0356

fluent-bit in versions 1.1.0 to 1.6.10 is vulnerable to Heap-buffer-overflow in flbstrptime, related to src/flbstrptime.c...

Debian: Security Advisory (DLA-2422-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WS-2020-0418

In DOMPurify in versions 2.0.6 to 2.1.1 is vulnerable to xss in src/purify.js...

Debian DLA-2422-1 : qtsvg-opensource-src security update

Malformed SVG images were able to cause a segmentation fault in qtsvg-opensource-src, the QtSvg module for displaying the contents of SVG files in Qt. For Debian 9 stretch, this problem has been fixed in version 5.7.120161021-2.1. We recommend that you upgrade your qtsvg-opensource-src packages...

[SECURITY] [DLA 2422-1] qtsvg-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2422-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...

DLA-2422-1 qtsvg-opensource-src - security update

Bulletin has no description...

PT-2023-25475 · Gifsicle +2 · Gifsicle +2

Name of the Vulnerable Software and Affected Versions: Gifsicle version 1.9.3 Description: A heap buffer overflow issue was discovered in Gifsicle via the ambiguity error component at /src/clp.c. Recommendations: For Gifsicle version 1.9.3, at the moment, there is no information about a newer...

PT-2023-29792

Name of the Vulnerable Software and Affected Versions gifsicle version 1.94 Description A floating point exception FPE issue was discovered in gifsicle through the resize stream function at src/xform.c. This issue can cause problems when processing certain inputs. Recommendations For gifsicle...

WS-2020-0383

Fluent Bit before v1.6.4 is vulnerable to heap-buffer-overflow in flbutilstimetoseconds, related to src/flbutils.c...

PT-2020-16756

Name of the Vulnerable Software and Affected Versions Strapi versions prior to 3.2.5 Description The issue concerns unwanted /proxy?url= functionality in the admin/src/containers/InputModalStepperProvider/index.js file. This functionality can be exploited, but details about real-world incidents o...