1212 matches found
GLSA-201703-04 : cURL: Certificate validation error
The remote host is affected by the vulnerability described in GLSA-201703-04 cURL: Certificate validation error cURL and applications linked against libcurl support OCSP stapling, also known as the TLS Certificate Status Request extension using the CURLOPTSSLVERIFYSTATUS option. When telling cURL...
FreeBSD : cURL -- ocsp status validation error (311e4b1c-f8ee-11e6-9940-b499baebfeaf)
The cURL project reports : SSLVERIFYSTATUS ignored curl and libcurl support 'OCSP stapling', also known as the TLS Certificate Status Request extension using the CURLOPTSSLVERIFYSTATUS option. When telling curl to use this feature, it uses that TLS extension to ask for a fresh proof of the server...
CURL-CVE-2017-2629 SSL_VERIFYSTATUS ignored
curl and libcurl support "OCSP stapling", also known as the TLS Certificate Status Request extension using the CURLOPTSSLVERIFYSTATUS option. When telling curl to use this feature, it uses that TLS extension to ask for a fresh proof of the server's certificate's validity. If the server does not...
DEBIAN-CVE-2016-10198
The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...
Newly Discovered Mac Malware with Ancient Code Spying on Biotech Firms
Security researchers have discovered a rare piece of Mac-based espionage malware that relies on outdated coding practices but has been used in some previous real-world attacks to spy on biomedical research center computers. Dubbed Fruitfly, the malware has remained undetected for years on macOS...
Firejail - Local Privilege Escalation
Firejail - Local Privilege Escalation firejail advisory for TOCTOU in --get and --put local root Releasing a brief advisory/writeup about a local root privesc found in firejail that we reported back in Nov, 2016. This is in response to a recent thread on oss-sec where people seem interested in...
gstreamer-plugins-bad-free: Off-by-one read in gst_h264_parse_set_caps
An out-of-bounds heap read flaw was found in GStreamer's H.264 parser. A remote attacker could use this flaw to cause an application using GStreamer to crash...
Yes, My Name is ||
Different cultures and nationalities have different naming conventions; I came from a one that led me to face the universe with a personal name "Or". I fact, my name has different meanings in different languages. In English the meaning of "Or" is function word that indicate alternatives and in...
CVE-2016-3827
codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Flash Player software platform, which allows a violator to exert indefinite effects
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause unpredictable effects...
The vulnerability of the Apache Struts software platform, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the Apache Struts software platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack through a combined request...
Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the Flash Player software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the Flash Player software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the Flash Player software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the Flash Player software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the Flash Player software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
The vulnerability of the Flash Player software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Flash Player software is related to errors in its code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...