ImageMagick: incorrect boundary checks in DecodePSDPixels

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.

kexec-tools: mkdumprd script called "dracut" in the current working directory

The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.

ImageMagick: out of bound issue in rle file

The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image file.

Stack-based buffer overflow in game-music-emu before 0.6.1.

game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.

ntp: MITM attacker can force ntpd to make a step larger than the panic threshold

The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).

ImageMagick: filling memory during identification of image

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image."

ntp: 'ntpq saveconfig' command allows dangerous characters in filenames

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

ImageMagick: incorrect thread limit logic

Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

ImageMagick: memory leak in psd handling

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

ImageMagick: crash due to corrupted dib file

The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.

ImageMagick: crash when parsing resource block

ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems

ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys.

game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).

ImageMagick: incorrect handling of "previous" image in the JNG decoder

The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

ImageMagick: memory leak in quantum management

Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

ImageMagick: throwing of exceptions in psd handling

The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."

ImageMagick: overflow in rle file

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

ImageMagick: crash in png coder

The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).