Bastien-Roucaries

The issue is related to memory leak errors in the ruby-magick interface between Ruby and the ImageMagick library. This can lead to a denial of service (DOS) by memory exhaustion, potentially allowing a remote attacker to cause a service disruption.

Foi encontrada uma falha no Ansible na coleção amazon.aws ao usar o parâmetro `tower callback` do módulo `amazon.aws.ec2 instance`. Essa falha permite que um invasor se aproveite do tratamento inseguro do parâmetro, levando ao vazamento da senha nos logs.

The issue is related to memory leaks in the ReadSCREENSHOTImage function, which can cause denial of service.

The issue allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file. This is due to a problem in the ReadJPEGImage function in coders/jpeg.c.

The issue is related to the handling of images in ImageMagick, where the coders/mpc.c file does not enable seekable streams, which prevents the validation of blob sizes. This can be exploited by remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts via an image received from stdin.

The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, via JPEG data that is too short.

A heap overflow issue exists in the WaveletDenoiseImage function, located in MagickCore/fx.c, allowing remote attackers to cause a denial of service by crashing the system via a crafted image.

O problema está relacionado à validação insuficiente de entradas na biblioteca JavaScript DOMPurify, o que pode levar a um ataque de script entre sites (XSS). Essa vulnerabilidade permite que um invasor remoto execute um ataque de script entre sites. O DOMPurify é um sanitizador de XSS exclusivo para DOM, super-rápido e extremamente tolerante para HTML, MathML e SVG, e estava vulnerável a mXSS baseado em aninhamento.