Search CVE reports
271 – 280 of 283 results
Some fixes available 2 of 6
The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with malformed...
41 affected packages
sitecopy, swish-e, cableswig, coin3, apache2...
| Package | 26.04 LTS |
|---|---|
| sitecopy | Needs evaluation |
| swish-e | Needs evaluation |
| cableswig | Not in release |
| coin3 | Not affected |
| apache2 | Not affected |
| apr-util | Not affected |
| audacity | Not affected |
| ayttm | Not in release |
| cadaver | Not affected |
| celementtree | Not in release |
| cmake | Not affected |
| expat | Fixed |
| gdcm | Not affected |
| ghostscript | Not affected |
| grmonitor | Not in release |
| insighttoolkit | Not in release |
| kompozer | Not in release |
| libparagui1.1 | Not in release |
| libxmltok | Not in release |
| matanza | Ignored |
| paraview | Needs evaluation |
| poco | Not affected |
| python-xml | Not in release |
| python2.4 | Not in release |
| python2.5 | Not in release |
| python2.6 | Not in release |
| simgear | Not affected |
| smart | Not in release |
| tdom | Not affected |
| texlive-bin | Not affected |
| tla | Not in release |
| vnc4 | Not in release |
| vtk | Not in release |
| w3c-libwww | Not in release |
| wbxml2 | Not affected |
| wxwidgets2.6 | Not in release |
| wxwidgets2.8 | Not in release |
| wxwindows2.4 | Not in release |
| xmlrpc-c | Fixed |
| xotcl | Not affected |
| xulrunner | Not in release |
Some fixes available 2 of 8
The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML...
41 affected packages
sitecopy, swish-e, insighttoolkit, cadaver, cableswig...
| Package | 26.04 LTS |
|---|---|
| sitecopy | Needs evaluation |
| swish-e | Needs evaluation |
| insighttoolkit | Not in release |
| cadaver | Vulnerable |
| cableswig | Not in release |
| coin3 | Vulnerable |
| apache2 | Not affected |
| apr-util | Not affected |
| audacity | Not affected |
| ayttm | Not in release |
| celementtree | Not in release |
| cmake | Not affected |
| expat | Fixed |
| gdcm | Not affected |
| ghostscript | Not affected |
| grmonitor | Not in release |
| kompozer | Not in release |
| libparagui1.1 | Not in release |
| libxmltok | Not in release |
| matanza | Ignored |
| paraview | Needs evaluation |
| poco | Not affected |
| python-xml | Not in release |
| python2.4 | Not in release |
| python2.5 | Not in release |
| python2.6 | Not in release |
| simgear | Not affected |
| smart | Not in release |
| tdom | Not affected |
| texlive-bin | Not affected |
| tla | Not in release |
| vnc4 | Not in release |
| vtk | Not in release |
| w3c-libwww | Not in release |
| wbxml2 | Not affected |
| wxwidgets2.6 | Not in release |
| wxwidgets2.8 | Not in release |
| wxwindows2.4 | Not in release |
| xmlrpc-c | Fixed |
| xotcl | Not affected |
| xulrunner | Not in release |
Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary...
4 affected packages
ghostscript, gs-afpl, gs-esp, gs-gpl
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| gs-afpl | — |
| gs-esp | — |
| gs-gpl | — |
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier,...
4 affected packages
ghostscript, gs-afpl, gs-esp, gs-gpl
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| gs-afpl | — |
| gs-esp | — |
| gs-gpl | — |
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
4 affected packages
ghostscript, gs-afpl, gs-esp, gs-gpl
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| gs-afpl | — |
| gs-esp | — |
| gs-gpl | — |
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer...
4 affected packages
ghostscript, gs-afpl, gs-esp, gs-gpl
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| gs-afpl | — |
| gs-esp | — |
| gs-gpl | — |
icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a...
2 affected packages
ghostscript, gs-gpl
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| gs-gpl | — |
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier,...
2 affected packages
ghostscript, gs-gpl
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| gs-gpl | — |
Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.
2 affected packages
ghostscript, jasper
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| jasper | — |
Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (program exit) by creating the appropriate tmp.XXXXXXXXXX temporary file, which...
2 affected packages
ghostscript, jasper
| Package | 26.04 LTS |
|---|---|
| ghostscript | — |
| jasper | — |