RHEL 6 : librelp (RHSA-2018:1702)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1702 advisory. Librelp is an easy-to-use library for the Reliable Event Logging Protocol RELP protocol. RELP is a general-purpose, extensible logging protocol...

Critical: Red Hat Security Advisory: librelp security update

An update for librelp is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impa...

Critical: Red Hat Security Advisory: librelp security update

An update for librelp is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base...

SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2018:1364-1)

This update for openjpeg2 fixes the following security issues : - CVE-2015-1239: A double free vulnerability in the j2kreadppmv3 function allowed remote attackers to cause a denial of service crash bsc1066713 - CVE-2017-17479: A stack-based buffer overflow in the pgxtoimage function in...

CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution...

openSUSE Security Update : libvorbis (openSUSE-2018-472)

This update for libvorbis fixes the following issues : Security issues fixed : - CVE-2018-10393: Fixed stack-based buffer over-read in barknoisehybridm bsc1091072. - CVE-2017-14160: Fixed out-of-bounds access inside barknoisehybridmp function bsc1059812. This update was imported from the...

openSUSE Security Update : ghostscript (openSUSE-2018-479)

This update for ghostscript fixes the following issues : - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2018:1332-1)

This update for ghostscript fixes the following issues : - CVE-2018-10194: A stack-based buffer overflow was fixed in gdevpdts.c bsc1090099 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Security update for libvorbis (moderate)

This update for libvorbis fixes the following issues: Security issues fixed: - CVE-2018-10393: Fixed stack-based buffer over-read in barknoisehybridm bsc1091072. - CVE-2017-14160: Fixed out-of-bounds access inside barknoisehybridmp function bsc1059812. This update was imported from the...

CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution...

CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution...

Advantech WebAccess Node bwdnload Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwdnload.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs proces...

Advantech WebAccess Node bwsound2 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwsound2.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs proces...

Advantech WebAccess Node bwctrkrl Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwctrkrl.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs proces...

Advantech WebAccess Node wapnp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within wapnp.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs process...

Advantech WebAccess Node AutoConfig4IIS Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within AutoConfig4IIS.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs...

Advantech WebAccess Node notify2 TeleNum Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within notify2.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs process...

Advantech WebAccess Node bwmakdir Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwmakdir.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs...

Stack overflow

The ObjReader::ReadObj function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service stack-based buffer overflow or possibly execute arbitrary code via a crafted pdf file...

CVE-2018-11128

The ObjReader::ReadObj function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service stack-based buffer overflow or possibly execute arbitrary code via a crafted pdf file...