Huawei EulerOS: Security Advisory for poppler (EulerOS-SA-2020-2561)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-25624: Out-of-bounds Read

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver...

RHEL 8 : tcpdump (RHSA-2020:1604)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1604 advisory. The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2020-2416)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : libvorbis (EulerOS-SA-2020-2363)

According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mapping0forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a...

Huawei EulerOS: Security Advisory for file (EulerOS-SA-2020-2038)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : nasm (EulerOS-SA-2020-1941)

According to the version of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Netwide Assembler NASM 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage thi...

EulerOS 2.0 SP5 : libvorbis (EulerOS-SA-2020-1926)

According to the versions of the libvorbis package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393 - mapping0forward in mapping0.c in...

EulerOS 2.0 SP8 : file (EulerOS-SA-2020-1845)

According to the versions of the file packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - dobidnote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintf and filevprintf.CVE-2019-8904 -...

MGASA-2020-0291 Updated xpdf packages fix security vulnerability

A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump...

Updated xpdf packages fix security vulnerability

A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump...

Denial Of Service (DoS)

tcpflow is vulnerable to denial of service DoS. The vulnerability exists as a stack-based buffer over-read exists in setbit at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an addresshistogram call or a gethistogram...

OPENSUSE-SU-2020:0721-1 Security update for memcached

This update for memcached fixes the following issues: Security issue fixed: - CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. - CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110. This update was imported from the SUSE:SLE-15:Update update project...

Security update for memcached (moderate)

openSUSE Security Update: Security update for memcached Announcement ID: openSUSE-SU-2020:0721-1 Rating: moderate References: 1133817 1149110 Cross-References: CVE-2019-11596 CVE-2019-15026 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Descriptio...

Arbitrary Code Execution

wavpack is vulnerable to arbitrary code execution. A stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c allows a remote attacker to execute arbitrary code on the system via a malicious RF64 file...

Huawei EulerOS: Security Advisory for libgxps (EulerOS-SA-2020-1401)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : memcached (SUSE-SU-2020:0843-1)

This update for memcached fixes the following issues : Security issue fixed : CVE-2019-11596: Fixed a NULL pointer dereference in processlrucommand bsc1133817. CVE-2019-15026: Fixed a stack-based buffer over-read bsc1149110. Note that Tenable Network Security has extracted the preceding descripti...

CVE-2019-8904

dobidnote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintf and filevprintf...

Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2019-2233)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL CORE 5.05 / MAIN 5.05 : tcpdump Vulnerability (NS-SA-2020-0008)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has tcpdump packages installed that are affected by a vulnerability: - In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initializatio...