Oracle Linux 7 : qemu-kvm (ELSA-2014-0927)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0927 advisory. - Resolves: bz1095782 CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid configlen rhel-7.0.z -...

SMB Brute Force Logins With Default Credentials

A number of known default credentials are tried for the login via the SMB protocol. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Fedora Update for qemu FEDORA-2014-6970

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : coreutils (openSUSE-SU-2013:0233-1)

Avoid segmentation fault in 'join -i' with long line input bnc798541, VUL-1, CVE-2013-0223 - Avoid segmentation fault in 'uniq' with long line input bnc796243, VUL-1, CVE-2013-0222 - Avoid segmentation fault in 'sort -d' and 'sort -M' with long line input bnc798538, VUL-1, CVE-2013-0221...

Fedora 20 : qemu-1.6.2-6.fc20 (2014-6970)

QCOW1 validation CVEs: CVE-2014-0222, CVE-2014-0223 bz 1097232, bz 1097238, bz 1097222, bz 1097216 - CVE-2014-3461: Issues in USB post load checks bz 1097260, bz 1096821 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

[oss-security] CVE-2014-0222 Qemu: qcow1: Validate L2 table size

Hello, 'CVE-2014-0222' has been assigned to this issue. Too large L2 table sizes cause unbounded allocations. Images actually created by qemu-img only have 512 byte or 4k L2 tables. To keep things consistent with cluster sizes, allow ranges between 512 bytes and 64k in fact, down to 1 entry = 8...

Oracle Linux 6 : libtiff (ELSA-2014-0222)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0222 advisory. 3.9.4-10 - Resolves: 1063464. Several CVEs for libtiff Tenable has extracted the preceding description block directly from the Oracle Linux security...

Amazon Linux AMI : coreutils (ALAS-2013-261)

It was discovered that the sort, uniq, and join utilities did not properly restrict the use of the alloca function. An attacker could use this flaw to crash those utilities by providing long input strings. CVE-2013-0221 , CVE-2013-0222 , CVE-2013-0223 C Tenable Network Security, Inc. The...

Low: coreutils

Issue Overview: It was discovered that the sort, uniq, and join utilities did not properly restrict the use of the alloca function. An attacker could use this flaw to crash those utilities by providing long input strings. CVE-2013-0221, CVE-2013-0222, CVE-2013-0223 Affected Packages: coreutils...

coreutils security update

CentOS Errata and Security Advisory CESA-2013:1652 Updated coreutils packages that fix three security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common...

CVE-2013-0222

The CVE-2013-0222 issue concerns the GNU coreutils i18n patch used by SUSE. It affects the uniq utility in coreutils, where a long input string can trigger a stack-based buffer overflow in alloca, enabling a context-dependent denial-of-service (segmentation fault and crash). The vulnerability is ...

RedHat Update for coreutils RHSA-2013:1652-02

Check for the Version of coreutils OpenVAS Vulnerability Test RedHat Update for coreutils RHSA-2013:1652-02 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Low: Red Hat Security Advisory: coreutils security, bug fix, and enhancement update

Updated coreutils packages that fix three security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which...

Oracle Linux 5 : firefox (ELSA-2008-0222)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0222 advisory. 1.5.0.12-15.el51.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js 1.5.0.12-15 - Update patchset to fix regressions as per...

[ MDVSA-2013:023 ] coreutils

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:023 http://www.mandriva.com/en/support/security/ Package : coreutils Date : March 13, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been found and corrected in...

Fedora 17 : coreutils-8.15-10.fc17 (2013-1804)

fix multiple segmantation faults in i18n patch by SUSE 869442, 902917- CVE2013-0223/CVE2013-0221/CVE2013-0222 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

CVE-2012-0222

CVE-2012-0222 affects Rockwell Automation’s FactoryTalk RNADiagReceiver (CPR9 up to SR5; RSLogix 5000 17–20). A remote attacker can induce a DoS via a crafted packet, triggering an out-of-bounds read in the RNADiagReceiver service (listening on UDP/Port 4445 per advisory updates). Connected docum...

Apple Safari WebKit SVG Memory Corruption (CVE-2011-0222)

A memory corruption vulnerability has been reported in Apple Safari. The vulnerability is due to an error caused while handling Scalable Vector Graphics SVG objects. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web-page. Successful exploitation m...

APPLE-SA-2011-10-11-1 iTunes 10.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-11-1 iTunes 10.5 iTunes 10.5 is now available and addresses the following: CoreFoundation Available for: Windows 7, Vista, XP SP2 or later Impact: A man-in-the-middle attack may lead to an unexpected application termination or arbitra...

Apple Safari Multiple Vulnerabilities (Jul 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...