CVE-2014-0859

CVE-2014-0859 affects IBM WebSphere Application Server where the web server plugin configured to retry failed POST requests may cause a denial of service (daemon crash). Affected: WAS 7.x up to 7.0.0.33, WAS 8.x up to 8.0.0.9, WAS 8.5.x up to 8.5.5.2. Remediation: apply the corresponding Fix Pack...

CVE-2013-0859

The CVE concerns FFmpeg (libavcodec/tiff.c) and the add_doubles_metadata function. Before version 1.1, a negative or zero count value in a TIFF image can cause an out-of-bounds array access, granting remote attackers an unspecified impact. The documents confirm the vulnerable component and the un...

Oracle Linux 6 : poppler (ELSA-2010-0859)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0859 advisory. - Add poppler-0.12.4-CVE-2010-3702.patch Properly initialize parser - Add poppler-0.12.4-CVE-2010-3703.patch Properly initialize stack - Add...

Fedora Update for samba4 FEDORA-2013-0859

Check for the Version of samba4 OpenVAS Vulnerability Test Fedora Update for samba4 FEDORA-2013-0859 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2012-0859

The renderline function in the vorbis codec vorbis.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of...

CVE-2012-0859

CVE-2012-0859 affects FFmpeg libavcodec (vorbis.c render_line) prior to 0.9.1, due to an incomplete fix for CVE-2011-3893. A crafted Vorbis file can cause a crash or potentially allow code execution; upgrading FFmpeg to 0.9.1 or later is the documented remediation.

CVE-2012-0859

The renderline function in the vorbis codec vorbis.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of...

CentOS Update for cyrus-imapd CESA-2011:0859 centos4 x86_64

Check for the Version of cyrus-imapd OpenVAS Vulnerability Test CentOS Update for cyrus-imapd CESA-2011:0859 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2012-0859

The renderline function in the vorbis codec vorbis.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of...

CentOS Update for cyrus-imapd CESA-2011:0859 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-0859

CVE-2011-0859 affects Oracle PeopleSoft Enterprise HRMS, specifically 9.0 Tax Update 11-B and 9.1 Tax Update 11-B. The vulnerability is described as an unspecified issue that allows remote authenticated users to impact confidentiality and integrity via unknown vectors related to Global Payroll — ...

CVE-2010-0859

Technical details for CVE-2010-0859 are not publicly available in the provided documents. The entries reference Oracle E-Business Suite 11.5.10.2 ATG RUP6 but do not disclose affected components, exploit vectors, or fixes. Monitor for updates.

SLES10: Security update for the Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

SLES10: Security update for the Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

Debian: Security Advisory (DSA-1800-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1800-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1800-1 [email protected] http://www.debian.org/security/ dann frazier May 15, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1800-1 linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1794-1 [email protected] http://www.debian.org/security/ dann frazier May 6, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

Linux Kernel /ipc/shm.c文件本地拒绝服务漏洞

BUGTRAQ ID: 34020 CVECAN ID: CVE-2009-0859 Linux Kernel是开放源码操作系统Linux所使用的内核。 如果禁用了CONFIGSHMEM的话，Linux Kernel的shm子系统中ipc/shm.c文件的shmgetstat函数没有正确地解释inode的数据类型，这允许本地用户通过SHMINFO shmctl调用导致系统挂起。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-0859

CVE-2009-0859 affects the Linux kernel shm subsystem (ipc/shm.c). When CONFIG_SHMEM is disabled, shm_get_stat misinterprets the inode data type, enabling local users to trigger a denial of service (system hang) via an SHM_INFO shmctl call (as demonstrated by the ipcs program). The advisory notes ...