56 matches found
[ASA-201806-12] cantata: multiple issues
Arch Linux Security Advisory ASA-201806-12 ========================================== Severity: High Date : 2018-06-20 CVE-ID : CVE-2018-12559 CVE-2018-12560 CVE-2018-12561 CVE-2018-12562 Package : cantata Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-721 Summary...
CVE-2018-12562
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary. The shell evaluates wildcards such as in an injected string:/home/../tmp/ string...
CVE-2018-12562
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the arguments to the actual mount.cifs binary. The shell evaluates wildcards such as in an injected string:/home/../tmp/ string...
CVE-2018-12562
Cantata (Cantata mounter D-Bus service) up to version 2.3.1 is affected by CVE-2018-12562 due to the wrapper script mount.cifs.wrapper using the shell to forward arguments to mount.cifs, allowing wildcard expansion and potential argument manipulation. The Mageia advisory notes this alongside CVEs...
Microsoft Windows DNSAPI Remote Code Execution Vulnerability (CNVD-2018-12562)
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the United States.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Windows Domain Name Windows Domain Name Syste...
FreeBSD : libsndfile -- multiple vulnerabilities (2b386075-1d9c-11e8-b6aa-4ccc6adda413)
Agostino Sarubbo, Gentoo reports : CVE-2017-8361 Medium: The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted audio file. CVE-2017-8362 Medium:...
Fedora 26 : libsndfile (2017-67a3755b96)
fixes heap-based Buffer Overflow in psfbinheaderwritef function 1483140, CVE-2017-12562 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Fedora Update for libsndfile FEDORA-2017-67a3755b96
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-12562
Heap-based Buffer Overflow in the psfbinheaderwritef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...
DEBIAN-CVE-2017-12562
Heap-based Buffer Overflow in the psfbinheaderwritef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...
CVE-2017-12562
Heap-based Buffer Overflow in the psfbinheaderwritef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...
CVE-2017-12562
CVE-2017-12562 affects libsndfile, specifically the psf_binheader_writef function in common.c, with a heap-based buffer overflow that can be exploited remotely to crash the application or cause other impacts. Reported as affecting libsndfile up to version 1.0.28 (and related package entries acros...
Fedora Core 12 FEDORA-2009-12562 (libtool)
The remote host is missing an update to libtool announced via advisory FEDORA-2009-12562. OpenVAS Vulnerability Test $Id: fcore200912562.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12562 libtool Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 12 FEDORA-2009-12562 (libtool)
The remote host is missing an update to libtool announced via advisory FEDORA-2009-12562. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...