Fedora Update for php FEDORA-2017-cdaaf6ea12

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 8 package php7 version 7.1.11-alt1

Nov. 3, 2017 Anton Farygin 7.1.11-alt1 - 7.1.11 Fixes: CVE-2016-1283...

Security fix for the ALT Linux 10 package php8.0 version 7.1.11-alt1

Nov. 3, 2017 Anton Farygin 7.1.11-alt1 - 7.1.11 Fixes: CVE-2016-1283...

Slackware 14.0 / 14.1 / 14.2 / current : php (SSA:2017-300-01)

New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-300-01. The text itself is copyright...

[slackware-security] php

New php packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/php-5.6.32-i586-1slack14.2.txz: Upgraded. Several security bugs were fixed in this release: Out of bounds read in...

CVE-2014-1283

...

CVE-2014-1283

CVE-2014-1283 is rejected/not used; the description states this candidate should not be used.

Denial Of Service (DoS)

expat is vulnerable to denial of service DoS attacks, with the possibility of other attacks. The vulnerability exists because there are multiple integer overflows in the XMLGetBuffer function that leads to a heap-based buffer overflow which may lead to further unspecified impact. CVE-2016-4472 is...

Tenable Log Correlation Engine (LCE) < 4.8.1 Multiple Vulnerabilities

The version of Tenable Log Correlation Engine LCE installed on the remote host is prior to 4.8.1. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist in the Handlebars library in the lib/handlebars/utils.js script due to a failur...

F5 Networks BIG-IP : Expat XML library vulnerability (K50459349)

Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283. CVE-2015-2716 C Tenable Network...

SUSE SLED12 / SLES12 Security Update : pcre (SUSE-SU-2016:3161-1)

This update for pcre to version 8.39 bsc972127 fixes several issues. If you use pcre extensively please be aware that this is an update to a new version. Please make sure that your software works with the updated version. This version fixes a number of vulnerabilities that affect pcre and...

SOL98009539 - PHP/PCRE vulnerability CVE-2016-1283

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

GLSA-201607-02 : libpcre: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-02 libpcre: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libpcre. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or crea...

Buffer overflow

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and...

PSF-2016-6 Expat 2.2 (Expat bug #537)

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and...

Ubuntu 12.04 LTS : xmlrpc-c vulnerabilities (USN-3013-1)

It was discovered that the Expat code in XML-RPC for C and C++ unexpectedly called srand in certain circumstances. This could reduce the security of calling applications. CVE-2012-6702 It was discovered that the Expat code in XML-RPC for C and C++ incorrectly handled seeding the random number...

[slackware-security] pcre

New pcre packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/pcre-8.39-i486-1slack14.1.txz: Upgraded. This release fixes bugs including a couple of DoS security issues, and retrofits to PCRE1 some...

SUSE SLED12 / SLES12 Security Update : expat (SUSE-SU-2016:1508-1)

This update for expat fixes the following issues : Security issue fixed : - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. bsc979441 - CVE-2015-1283: Fix multiple integer overflows. bnc980391 Note that Tenable Network Security has extracted the...

expat2 -- denial of service

Adam Maris reports: It was found that original patch for issues CVE-2015-1283 and CVE-2015-2716 used overflow checks that could be optimized out by some compilers applying certain optimization settings, which can cause the vulnerability to remain even after applying the patch...

openSUSE Security Update : expat (openSUSE-2016-695)

This update for expat fixes the following issues : Security issue fixed : - CVE-2016-0718: Fix Expat XML parser that mishandles certain kinds of malformed input documents. bsc979441 - CVE-2015-1283: Fix multiple integer overflows. bnc980391 This update was imported from the SUSE:SLE-12:Update...