64 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-16844
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application cra...
CBL Mariner 2.0 Security Update: procmail (CVE-2017-16844)
The version of procmail installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-16844 advisory. - Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote...
RHEL 6 : procmail (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - procmail: Heap-based buffer overflow in loadbuf function in formisc.c CVE-2017-16844 Note that Nessus has not teste...
RHEL 5 : procmail (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - procmail: Heap-based buffer overflow in loadbuf function in formisc.c CVE-2017-16844 Note that Nessus has not teste...
RHEL 7 : rh-nginx114-nginx (RHSA-2018:3681)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3681 advisory. - nginx: Excessive memory consumption via flaw in HTTP/2 implementation CVE-2018-16843 - nginx: Excessive CPU usage via flaw in HTTP/2...
CVE-2017-16844 affecting package procmail for versions less than 3.22-53
CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...
Debian: Security Advisory (DLA-1173-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nginx Plus R1 < R15-P2 / R16 < R16-P1 Multiple Vulnerabilities
According to it's self reported version, the installed version of Nginx Plus is R1 built on Open Source version 1.5.3-1 prior to R15-P2 or R16 built on Open Source version 1.15.2 prior to R16-P1. It is, therefore, affected by the following issues : - An unspecified error exists related to the...
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - nginx (CVE-2018-16844, CVE-2018-16845, CVE-2018-16843, CVE-2019-7401)
Summary Security Vulnerabilities affect IBM Cloud Private - nginx Vulnerability Details CVEID: CVE-2018-16844 DESCRIPTION: nginx is vulnerable to a denial of service, caused by a flaw when complied with ngxhttpv2module. By sending a specially-crafted HTTP/2 request, a remote attacker could exploi...
CVE-2017-16844 affecting package procmail for versions less than 3.22-53
CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...
CVE-2017-16844 affecting package procmail for versions less than 3.22-53
CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...
Mageia: Security Advisory (MGASA-2018-0459)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
About the security content of Xcode 13
About the security content of Xcode 13 This document describes the security content of Xcode 13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...
SUSE: Security Advisory (SUSE-SU-2019:0334-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-16844
creationtimestamp| type| source ---|---|--- 2020-10-01 20:53:10+00:00| seen| https://t.me/cibsecurity/14992 2025-07-25 01:12:22+00:00| seen| https://gist.github.com/ferasdour/504aa49686f8e64564249de44cd5eab2...
CVE-2020-16844
CVE-2020-16844 affects Istio 1.5.0–1.5.8 and 1.6.0–1.6.7, where an AuthorizationPolicy with DENY actions using wildcard suffixes (e.g., *-some-suffix) for source principals or namespaces can fail to deny access, bypassing the intended policy. The available connected documents consistently describ...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 security update
An update for servicemesh is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
RHEL 8 : Red Hat OpenShift Service Mesh 1.1 (RHSA-2020:3425)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3425 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...
Nginx Vulnerabilities Jul 2017 - Oct 2019
Summary Symantec SWG products using affected versions of Nginx may be susceptible to multiple Nginx vulnerabilities. A remote attacker can use crafted requests to obtain sensitive information or cause denial of service. An attacker can also obtain sensitive information or cause denial of service ...
Huawei EulerOS: Security Advisory for procmail (EulerOS-SA-2017-1316)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...