1103 matches found
CVE-2018-16300
The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgpattrprint because of unlimited recursion...
EulerOS 2.0 SP2 : gd (EulerOS-SA-2019-1842)
According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder...
Oracle Linux 8 : poppler (ELSA-2019-2713)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2713 advisory. 0.66.0-11.el80.12 - Ignore dict Length if it is broken - Resolves: 1741146 0.66.0-11.el80.11 - Check whether input is RGB in PSOutputDev::checkPageSlic...
RHEL 8 : poppler (RHSA-2019:2713)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2713 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: heap-based buffer...
poppler: stack consumption in function Dict::find() in Dict.cc
PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...
Updated poppler packages fix security vulnerabilities
Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...
MGASA-2019-0244 Updated poppler packages fix security vulnerabilities
Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...
Uncontrolled Resource Consumption in MetadataExtractor
MetadataExtractor 2.1.0 allows stack consumption...
Poppler 0.74 Multiple Vulnerabilities
The version of Poppler installed on the remote host is 0.74. It is, therefore, affected by multiple vulnerabilities: - An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file ...
CVE-2019-14262
MetadataExtractor 2.1.0 allows stack consumption...
CVE-2019-14262
MetadataExtractor 2.1.0 allows stack consumption...
Stack overflow
MetadataExtractor 2.1.0 allows stack consumption...
CVE-2019-14262
MetadataExtractor 2.1.0 allows stack consumption...
CVE-2019-14262
CVE-2019-14262 concerns MetadataExtractor 2.1.0, vulnerable to a stack-based buffer overflow caused by improper bounds checking. A crafted input (e.g., a specially crafted file) could overflow a stack and allow remote code execution on the target system. The related advisories cite a high impact ...
MetadataExtractor Stack Overflow Vulnerability
MetadataExtractor is a .NET library for extracting metadata such as Exif, IPT, XMP and ICC from image and video files. A security vulnerability exists in MetadataExtractor version 2.1.0. An attacker can exploit this vulnerability to cause a denial of service stack consumption...
CVE-2019-13129
On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...
CVE-2019-13129
On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...
Design/Logic Flaw
On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...
CVE-2019-13129
Summary: CVE-2019-13129 affects the Motorola CX2L MWR04L router (version 1.01). The issue is a stack consumption/infinite recursion in the scopd process reachable over TCP port 8010 and UDP port 8080, caused by improper length handling in snprintf. This can lead to denial of service through resou...
CVE-2019-13129
On the Motorola router CX2L MWR04L 1.01, there is a stack consumption infinite recursion issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling...