Oracle Linux 6 : curl (ELSA-2017-0847)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0847 advisory. 7.19.7-53 - treat Negotiate authentication as connection-oriented CVE-2017-2628 Tenable has extracted the preceding description block directly from the Oracle...

CVE-2016-0847

The CVE affects the Android Telecom component on Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-04-01). The issue allows a crafted app with Signature or SignatureOrSystem access to spoof the originating telephone number of a call. The impact is limited to local attacker ...

Oracle: Security Advisory (ELSA-2008-0847)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-0847)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-0847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for nbd FEDORA-2015-12703

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for nbd FEDORA-2015-12719

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : nbd-3.11-1.fc22 (2015-12719)

Fix unsafe signal handlers to avoid DoS attack CVE-2015-0847. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Ubuntu: Security Advisory (USN-2676-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2676-1: NBD vulnerabilities

It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that has a partial match and bypass access restrictions. This issue only affected Ubuntu 12.04 LTS. CVE-2013-6410 Tuomas Räsänen discovered that NBD incorrectly handled...

USN-2676-1 nbd vulnerabilities

It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that has a partial match and bypass access restrictions. This issue only affected Ubuntu 12.04 LTS. CVE-2013-6410 Tuomas Räsänen discovered that NBD incorrectly handled...

openSUSE Security Update : nbd (openSUSE-2015-393)

Fix CVE-2013-7441 boo931987 - CVE-2013-7441.patch - Fix CVE-2015-0847 boo930173 - nbdsignalingCVE-2015-0847.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-393. The text...

CVE-2015-0847

nbd-server.c in Network Block Device nbd-server before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service deadlock via unspecified vectors...

CVE-2015-0847

nbd-server.c in Network Block Device nbd-server before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service deadlock via unspecified vectors...

CVE-2015-0847

The CVE-2015-0847 issue affects the NBD (Network Block Device) component, specifically nbd-server before version 3.11, where signals are not handled correctly. This root cause can allow a remote attacker to trigger a denial of service (deadlock) via unspecified vectors. Multiple advisory feeds (F...

CVE-2015-0847

nbd-server.c in Network Block Device nbd-server before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service deadlock via unspecified vectors...

Debian: Security Advisory (DSA-3271-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-223-1 : nbd security update

A vulnerability has been discovered in nbd-server, the server for the Linux Network Block Device. CVE-2015-0847 Tuomas Rsnen discovered that unsafe signal handling is present in nbd-server. This vulnerability could be exploited by a remote client to cause a denial of service. For the oldoldstable...

[SECURITY] [DLA 223-1] nbd security update

Package : nbd Version : 1:2.9.16-8+squeeze2 CVE ID : CVE-2015-0847 Debian Bug : 784657 A vulnerability has been discovered in nbd-server, the server for the Linux Network Block Device. CVE-2015-0847 Tuomas Räsänen discovered that unsafe signal handling is present in nbd-server. This vulnerability...

CVE-2013-0847

The ffid3v2parse function in libavformat/id3v2.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via ID3v2 header data, which triggers an out-of-bounds array access...