opensuse leap 42.2 vulnerabilities and exploits

(subscribe to this query)

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick prior to 6.9.4-0 allows remote malicious users to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.

Imagemagick Imagemagick Opensuse Leap 42.1 Opensuse Leap 42.2

print-wb.c in tcpdump prior to 4.7.4 allows remote malicious users to cause a denial of service (segmentation fault and process crash).

Tcpdump Tcpdump Opensuse Leap 42.2 Opensuse Project Leap 42.1

The AliasHandler component in PostfixAdmin prior to 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.

Opensuse Leap 42.1 Opensuse Leap 42.2 Postfixadmin Project Postfixadmin

The transit path validation code in Heimdal prior to 7.3 might allow malicious users to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.

Heimdal Project Heimdal Opensuse Leap 42.2 Opensuse Leap 42.3

The ssh_agent_channel_data function in PuTTY prior to 0.68 allows remote malicious users to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forwarded agent connection, w...

Putty Putty Opensuse Leap 42.2 Opensuse Project Leap 42.1

1 EDB exploit

Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga prior to 1.14 allows remote malicious users to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.

Icinga Icinga Opensuse Leap 42.2 Opensuse Project Leap 42.1

The MSL interpreter in ImageMagick prior to 6.9.6-4 allows remote malicious users to cause a denial of service (segmentation fault and application crash) via a crafted XML file.

Imagemagick Imagemagick Opensuse Leap 42.2 Opensuse Project Leap 42.1

The ".encfs6.xml" configuration file in encfs prior to 1.7.5 allows remote malicious users to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".

Opensuse Leap 42.1 Opensuse Leap 42.2 Opensuse Opensuse 13.2 Encfs Project Encfs

Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote malicious users to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.

Imagemagick Imagemagick 6.9.4-8 Opensuse Leap 42.1 Opensuse Leap 42.2

Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote malicious users to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

Imagemagick Imagemagick 6.9.5-5 Opensuse Leap 42.1 Opensuse Leap 42.2

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook