Opensuse: Security Vulnerabilities
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
CVSS Score
7.8
EPSS Score
0.003
Published
2017-03-23
Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
CVSS Score
7.8
EPSS Score
0.003
Published
2017-03-23
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.
CVSS Score
5.9
EPSS Score
0.005
Published
2017-03-23
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission check.
CVSS Score
2.7
EPSS Score
0.399
Published
2017-03-20
saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
CVSS Score
7.5
EPSS Score
0.007
Published
2017-03-20
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
CVSS Score
9.8
EPSS Score
0.035
Published
2017-03-20
Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
CVSS Score
7.5
EPSS Score
0.021
Published
2017-03-20
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
CVSS Score
7.5
EPSS Score
0.016
Published
2017-03-20
Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
CVSS Score
7.5
EPSS Score
0.016
Published
2017-03-20
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
CVSS Score
7.5
EPSS Score
0.02
Published
2017-03-20