165 matches found
Amazon Linux AMI : nginx (ALAS-2016-655)
It was discovered that nginx could perform an out of bound read and dereference an invalid pointer when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash if nginx enabled the resolver in its...
Mageia: Security Advisory (MGASA-2016-0065)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated nginx packages fix security vulnerabilities
Updated nginx package fixes security vulnerabilities: Several vulnerabilities were discovered in the resolver in nginx, leading to denial of service or, potentially, to arbitrary code execution. These only affect nginx if the "resolver" directive is used in a configuration file CVE-2016-0742,...
CVE-2016-0742
The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service invalid pointer dereference and worker process crash via a crafted UDP DNS response...
CVE-2016-0742
The CVE-2016-0742 issue affects nginx resolver prior to 1.8.1 and 1.9.x prior to 1.9.10. A crafted UDP DNS response can trigger an invalid pointer dereference, crashing a worker process and causing a denial of service. Affected component: resolver in nginx; root cause: dereference of invalid poin...
Invalid pointer dereference in resolver
Invalid pointer dereference in resolver Severity: medium CVE-2016-0742 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9...
[SECURITY] [DSA 3473-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3473-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 11, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3473-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3473-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 11, 2016 https://www.debian.org/security/faq -...
Ubuntu: Security Advisory (USN-2892-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : nginx vulnerabilities (USN-2892-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2892-1 advisory. It was discovered that nginx incorrectly handled certain DNS server responses when the resolver is enabled. A remote attacker could possibly use this iss...
openSUSE Security Update : nginx (openSUSE-2016-161)
This update to nginx 1.8.1 fixes the following issues : - CVE-2016-0742: Invalid pointer dereference during DNS server response processing boo963781 - CVE-2016-0746: Use-after-free condition during CNAME response processing boo963778 - CVE-2016-0747: Resource exhaustion through unlimited CNAME...
Security fix for the ALT Linux 9 package nginx version 1.8.1-alt1
Feb. 1, 2016 Denis Smirnov 1.8.1-alt1 - 1.8.1 - CVE-2016-0742 - CVE-2016-0746 - CVE-2016-0747...
Oracle: Security Advisory (ELSA-2014-0742)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SOL17248 - OpenSSL vulnerability CVE-2010-0742
Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...
CVE-2015-0742
The CVE describes a DoS in Cisco ASA’s Protocol Independent Multicast (PIM) forwarding due to improper multicast-forwarding registration. Affected Cisco ASA Software versions include 9.2(0.0)–9.4(0.115) and 100.13(0.21)–100.14(1.1). The issue (Bug CSCus74398) allows remote attackers to disrupt mu...
CentOS Update for thunderbird CESA-2014:0742 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-0742
CVE-2014-0742 concerns Cisco Unified Communications Manager (Unified CM) CAPF CSR management CLI. The CAPF CSR management feature contains insufficient input validation, allowing an authenticated, local attacker to read or write arbitrary files on the underlying OS via crafted CLI input (Bug ID C...
CVE-2014-0742
The Certificate Authority Proxy Function CAPF CLI implementation in the CSR management feature in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464...
CVE-2013-0742
Corel PDF Fusion 1.11 is affected by a stack-based buffer overflow via a long ZIP directory entry name in an XPS file, allowing remote code execution or a denial-of-service (application crash). This vulnerability is identified as CVE-2013-0742 and has multiple connected advisories (e.g., Red Hat,...
