OPENSUSE-SU-2019:2142-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-10197: Fixed user escape from share path definition bsc1141267. Bug fix: - Prepare for future use of kernel keyrings, modify /etc/pam.d/samba to include pamkeyinit.so; bsc1144059. This update was imported from the...

Samba 4.9.x < 4.9.13 / 4.10.x < 4.10.8 / 4.11.0rc3 Security Bypass (CVE-2019-10197)

The version of Samba running on the remote host is 4.9.x prior to 4.9.13, 4.10.x prior to 4.10.3.8, or 4.11.x prior to 4.11.0rc3. It is, therefore, affected by security bypass vulnerability. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of...

Ubuntu: Security Advisory (USN-4121-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba Share Path Definition Escape Vulnerability (CVE-2019-10197)

Samba is prone to a share path definition escape vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

[SECURITY] [DSA 4513-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4513-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 03, 2019 https://www.debian.org/security/faq -...

CVE-2019-10197

Samba CVE-2019-10197 affects Samba releases 4.9.x up to 4.9.13, 4.10.x up to 4.10.8, and 4.11.x up to 4.11.0rc3, where certain configuration parameters allow an unauthenticated actor to escape the share path and access directories outside the share. A related issue, CVE-2019-10218, affects the Sa...

Security fix for the ALT Linux 10 package samba version 4.10.8-alt1

Sept. 3, 2019 Evgeny Sinelnikov 4.10.8-alt1 - Update to first security autumn release - Fix samba-gpupdate check sysvol path with ignore case for compatibility - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Photon OS 1.0: Libevent PHSA-2017-0013

An update of the libevent package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121684;...

CVE-2018-10197

There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET...

CVE-2018-10197

CVE-2018-10197 is a time-based blind SQL injection in the ELO Access Manager (component) for ELOenterprise and ELOprofessional on versions 9 and 10. The vulnerability resides in the HTTP GET parameter “ticket,” allowing a remote attacker over the network to read database contents (e.g., administr...

SUSE SLES11 Security Update : libevent (SUSE-SU-2018:0263-1)

This update for libevent fixes the following issues : - CVE-2016-10195: DNS remote stack overread vulnerability bsc1022917 - CVE-2016-10196: stack/buffer overflow in evutilparsesockaddrport bsc1022918 backport for 2.0.21 - CVE-2016-10197: out-of-bounds read in searchmakenew bsc1022919 Note that...

openSUSE Security Update : libevent (openSUSE-2018-95)

This update for libevent fixes the following security issues : - CVE-2016-10195: DNS remote stack overread vulnerability bsc1022917 - CVE-2016-10196: stack/buffer overflow in evutilparsesockaddrport bsc1022918 - CVE-2016-10197: out-of-bounds read in searchmakenew bsc1022919 This update was import...

CVE-2017-10197

CVE-2017-10197 concerns Oracle Hospitality OPERA 5 Property Services, Folios subcomponent. Affected versions are 5.4.2.x through 5.5.1.x. The vulnerability allows unauthorized access to data by exploiting physical access to the OPERA 5 Property Services, with the impact described as confidentiali...

EulerOS 2.0 SP1 : firefox (EulerOS-SA-2017-1092)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...

Ubuntu: Security Advisory (USN-3278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for thunderbird RHSA-2017:1201-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201705-01 : libevent: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201705-01 libevent: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libevent. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary co...

Mozilla Firefox < 53.0

The version of Firefox installed on the remote Windows host is prior to 53.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-10 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. CVE-2017-5469 - A...

Mozilla Firefox ESR < 45.9

The version of Firefox ESR installed on the remote Windows host is prior to 45.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-11 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. CVE-2017-5469 - A...

FreeBSD : libevent -- multiple vulnerabilities (b8ee7a81-a879-4358-9b30-7dd1bd4c14b1)

Debian Security reports : CVE-2016-10195: The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read. CVE-2016-10196: Stack-based buffer overflow in the...