1081 matches found
MGASA-2021-0002 Updated libxml2 packages fix a security vulnerability
libxml2 v2.9.10 and earlier has a global Buffer Overflow vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c CVE-2020-24977...
Arbitrary Code Execution
linux-firmware is vulnerable to arbitrary code execution. The vulnerability exists through buffer overflow in the bluetooth firmware...
Security update for pngcheck (moderate)
openSUSE Security Update: Security update for pngcheck Announcement ID: openSUSE-SU-2020:2177-1 Rating: moderate References: 1179528 Cross-References: CVE-2020-27818 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for pngchec...
CVE-2020-25185
The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to remotely execute arbitrary code on the IP150 firmware versions 5.02.09...
Updated arpwatch package fixes a security vulnerability
A buffer overflow from long hostnames. rhbz1563939...
MGASA-2020-0420 Updated arpwatch package fixes a security vulnerability
A buffer overflow from long hostnames. rhbz1563939...
Arbitrary Code Execution
audiofile is vulnerable to arbitrary code execution. A heap-based buffer overflow in Expand3To4Module::run when running sfconvert allows an attacker to execute arbitrary code on the host OS...
Denial Of Service (DoS)
firefox is vulnerable to denial of service. A heap buffer overflow in WebAssembly during Memory/Table resizing allows an attacker to crash the application...
Arbitrary Code Execution
binutils is vulnerable to arbitrary code execution. A heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c allows an attacker to execute arbitrary code on the host OS...
CVE-2020-7459
In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packe...
PT-2020-3623 · Gnu +7 · Grub2 +7
Name of the Vulnerable Software and Affected Versions: grub2 versions prior to 2.06 Description: The issue is related to a buffer overflow when handling symbolic links in ext filesystems. An arithmetic overflow occurs when a filesystem contains a symbolic link with an inode size of UINT32 MAX,...
ffjpeg buffer overflow vulnerability (CNVD-2021-18402)
ffjpeg is an open source JPEG encoder/decoder . A buffer overflow vulnerability exists in the 'jfifdecode' function of the jfif.c file in ffjpeg versions 2020-02-24 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly validating...
Arbitrary Code Execution
faad2 is vulnerable to arbitrary code execution. A heap-based buffer overflow in the function excludedchannels in libfaad/syntax.c allows an attacker to execute arbitrary code on the system...
Arbitrary Code Execution
faad2 is vulnerable to arbitrary code execution. The vulnerability exists as an issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2.8.1. There was a stack-based buffer overflow in the function calculategain in libfaad/sbrhfadj.c...
CVE-2020-12672
GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c...
CVE-2020-10029
The GNU C Library aka glibc or libc6 before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to...
CVE-2019-17652
A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient processes running under root priviledge crashes via sending specially crafted "StartAvCustomScan" type IPC client requests to the fctsched process due the argv...
CVE-2013-3492
XnView 2.03 has a stack-based buffer overflow vulnerability...
