openSUSE: Security Advisory for corosync (openSUSE-SU-2018:1136-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for corosync (important)

This update for corosync fixes the following issues: - CVE-2018-1084: Integer overflow in totemcrypto:authenticatenss23 could lead to command execution bsc1089346 - Providing an empty uid or gid results in coroparse adding uid 0. bsc1066585 - Fix a problem with configuration file incompatibilitie...

openSUSE Security Update : corosync (openSUSE-2018-417)

This update for corosync fixes the following issues : - CVE-2018-1084: Integer overflow in totemcrypto:authenticatenss23 could lead to command execution bsc1089346 - Providing an empty uid or gid results in coroparse adding uid 0. bsc1066585 - Fix a problem with configuration file incompatibiliti...

Oracle Linux 7 : corosync (ELSA-2018-1169)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1169 advisory. 2.4.3-2.1 - Resolves: rhbz1560467 - totemcrypto: Check length of the packet Tenable has extracted the preceding description block directly from the Oracle Linux...

Scientific Linux Security Update : corosync on SL7.x x86_64 (20180417)

Security Fixes : - corosync: Integer overflow in exec/totemcrypto.c:authenticatenss23 function CVE-2018-1084 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid109460; scriptversion"1.9";...

Fedora 27 : corosync (2018-b0253649be)

New upstream release with security fix for CVE-2018-1084 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Important: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

[SECURITY] [DSA 4174-1] corosync security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4174-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4174-1] corosync security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4174-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 17, 2018 https://www.debian.org/security/faq -...

CVE-2018-1084

CVE-2018-1084 affects Corosync prior to version 2.4.4, caused by an integer overflow in exec/totemcrypto.c that could crash the application (DoS). Public advisories and vendor Bulletins confirm a high-severity impact (CVSS v3.1 base 7.5) with network attack vector and no user interaction. Remedia...

CVE-2018-1084

corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c...

FreeBSD - FGPE Stack Clash (PoC) Exploit

Exploit for freebsd/x86 platform in category dos / poc / FreeBSDCVE-2017-FGPE.c for CVE-2017-1084 please compile with -O0 Copyright C 2017 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Fre...

CVE-2017-1084

creationtimestamp| type| source ---|---|--- 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42278 2017-06-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42277...

FreeBSD - 'FGPU' Stack Clash (PoC)

/ FreeBSDCVE-2017-FGPU.c for CVE-2017-1084 please compile with -O0 Copyright C 2017 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License,...

FreeBSD - 'FGPE' Stack Clash (PoC)

/ FreeBSDCVE-2017-FGPE.c for CVE-2017-1084 please compile with -O0 Copyright C 2017 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License,...

FreeBSD - FGPU Stack Clash (PoC)

FreeBSD - FGPU Stack Clash PoC / FreeBSDCVE-2017-FGPU.c for CVE-2017-1084 please compile with -O0 Copyright C 2017 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation,...

FreeBSD - FGPE Stack Clash (PoC)

FreeBSD - FGPE Stack Clash PoC / FreeBSDCVE-2017-FGPE.c for CVE-2017-1084 please compile with -O0 Copyright C 2017 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation,...

nl.mathworks.com XSS vulnerability

Vulnerable URL: http://nl.mathworks.com/help/thingspeak/search.html/%22--!%3E%3CSvg/Onload=%20confirm%60openbugbounty%60%3E%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1084 VIP website status:| Yes Check...

Memory corruption

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Adobe Acrobat and Reader Memory Corruption (APSB16-14: CVE-2016-1084)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing to unintended memory in a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF fi...