Search CVE reports
631 – 640 of 34287 results
osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation...
1 affected package
osslsigncode
| Package | 24.04 LTS |
|---|---|
| osslsigncode | Needs evaluation |
A Dynamic-link Library Injection vulnerability in OSGeo Project MapServer before v8.0 allows attackers to execute arbitrary code via a crafted executable.
1 affected package
mapserver
| Package | 24.04 LTS |
|---|---|
| mapserver | Needs evaluation |
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect...
1 affected package
libcap2
| Package | 24.04 LTS |
|---|---|
| libcap2 | Fixed |
osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS#7...
1 affected package
osslsigncode
| Package | 24.04 LTS |
|---|---|
| osslsigncode | Needs evaluation |
Not in release
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the...
1 affected package
subiquity
| Package | 24.04 LTS |
|---|---|
| subiquity | Not in release |
Not in release
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as...
1 affected package
subiquity
| Package | 24.04 LTS |
|---|---|
| subiquity | Not in release |
An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `DicomImageDecoder.cpp`. The lookup-table decoding logic used for `PALETTE COLOR` images does not validate pixel indices against the lookup...
1 affected package
orthanc
| Package | 24.04 LTS |
|---|---|
| orthanc | Needs evaluation |
A heap buffer overflow vulnerability exists in the PAM image parsing logic. When Orthanc processes a crafted PAM image embedded in a DICOM file, image dimensions are multiplied using 32-bit unsigned arithmetic. Specially chosen...
1 affected package
orthanc
| Package | 24.04 LTS |
|---|---|
| orthanc | Needs evaluation |
A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check...
1 affected package
orthanc
| Package | 24.04 LTS |
|---|---|
| orthanc | Needs evaluation |
A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation (VR) Unsigned Long (UL), instead of the expected VR Unsigned Short (US), which allows extremely large...
1 affected package
orthanc
| Package | 24.04 LTS |
|---|---|
| orthanc | Needs evaluation |