Oracle Linux 7 : kernel (ELSA-2015-1137)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1137 advisory. - fs pipe: fix pipe corruption and iovec overrun on partial copy Seth Jennings 1202861 1198843 CVE-2015-1805 - x86 kernel: Remove a bogus 'retfromfork'...

RHEL 7 : kernel-rt (RHSA-2015:1139)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1139 advisory. - Kernel: fs: isofs: infinite loop in CE record entries CVE-2014-9420 - kernel: use-after-free during key garbage collection CVE-2014-9529 -...

Bugzilla < 4.0.15 / 4.2.11 / 4.4.6 / 4.5.6 Multiple Vulnerabilities

Binary data 8606.prm...

RHEL 5 : rhev-hypervisor (RHSA-2011:1090)

An updated rhev-hypervisor package that fixes one security issue and several bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:0531)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0531 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...

Fedora 21 : bugzilla-4.4.6-1.fc21 (2014-12591)

Security fix for CVE-2014-1571, CVE-2014-1572, CVE-2014-1573 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 20 : bugzilla-4.2.11-1.fc20 (2014-12530)

Security fix for CVE-2014-1571, CVE-2014-1572, CVE-2014-1573 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for bugzilla FEDORA-2014-12530

Check the version of bugzilla SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868423";...

Fedora Update for bugzilla FEDORA-2014-12584

Check the version of bugzilla SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868420";...

CVE-2014-1573

CVE-2014-1573 affects Bugzilla before fixes: 2.x–4.0.x before 4.0.15; 4.1.x and 4.2.x before 4.2.11; 4.3.x and 4.4.x before 4.4.6; and 4.5.x before 4.5.6. The issue arises from not ensuring scalar context for certain CGI parameters, enabling remote XSS via a single parameter name receiving three ...

openSUSE Security Update : gnutls (openSUSE-SU-2012:0620-1)

3 vulnerabilities were discovered for the gnutls packages in openSUSE version 12.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-277. The text description of this plugin is C...

Amazon Linux AMI : gnutls (ALAS-2012-59)

A flaw was found in the way GnuTLS decrypted malformed TLS records. This could cause a TLS/SSL client or server to crash when processing a specially crafted TLS record from a remote TLS/SSL connection peer. CVE-2012-1573 A boundary error was found in the gnutlssessiongetdata function. A malicious...

Oracle Linux 6 : gnutls (ELSA-2012-0429)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0429 advisory. - fix CVE-2012-1573 - security issue in packet parsing 805432 Tenable has extracted the preceding description block directly from the Oracle Linux...

[ MDVSA-2013:020 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:020 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 8, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark:...

CVE-2013-1573

The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle a large number of padding bits, which allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-1573

Wireshark vulnerability CVE-2013-1573 affects the CSN.1 dissector (epan/dissectors/packet-csn1.c). The csnStreamDissector fails to properly handle a large number of padding bits, enabling remote attackers to cause a denial of service via an infinite loop when processing a malformed packet. Affect...

SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 6448)

This update of GnuTLS fixes multiple vulnerabilities : - remote attackers could cause a denial of service heap memory corruption and application crash via an issue in the asn1getlengthder function. CVE-2012-1569 - crafted GenericBlockCipher structures allow remote attackers to cause a denial of...

Ubuntu Update for linux-ec2 USN-1573-1

Ubuntu Update for Linux kernel vulnerabilities USN-1573-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15731.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ec2 USN-1573-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...

GnuTLS TLS Record Application GenericBlockCipher Parsing Integer Overflow (CVE-2012-1573)

An integer overflow vulnerability has been reported in GnuTLS. The vulnerability is due to improper handling of certain fields during the decryption process. A remote attacker can exploit this vulnerability by sending a specially crafted TLS Application Data packet to the server. Successful...

Mandriva Update for gnutls MDVSA-2012:040 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2012:040 gnutls Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...