Lucene search
K

64 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-16844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application cra...

10CVSS7.7AI score0.12524EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.14 views

CBL Mariner 2.0 Security Update: procmail (CVE-2017-16844)

The version of procmail installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-16844 advisory. - Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote...

10CVSS7.9AI score0.12524EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.11 views

RHEL 6 : procmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - procmail: Heap-based buffer overflow in loadbuf function in formisc.c CVE-2017-16844 Note that Nessus has not teste...

9.8CVSS9.8AI score0.12524EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.16 views

RHEL 5 : procmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - procmail: Heap-based buffer overflow in loadbuf function in formisc.c CVE-2017-16844 Note that Nessus has not teste...

9.8CVSS9.8AI score0.12524EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/27 12:0 a.m.40 views

RHEL 7 : rh-nginx114-nginx (RHSA-2018:3681)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3681 advisory. - nginx: Excessive memory consumption via flaw in HTTP/2 implementation CVE-2018-16843 - nginx: Excessive CPU usage via flaw in HTTP/2...

8.2CVSS6.8AI score0.47057EPSS
Exploits1References8
CBLMariner
CBLMariner
added 2024/04/03 12:40 a.m.23 views

CVE-2017-16844 affecting package procmail for versions less than 3.22-53

CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

10CVSS9.6AI score0.12524EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.10 views

Debian: Security Advisory (DLA-1173-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.12524EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/05/31 12:0 a.m.56 views

Nginx Plus R1 < R15-P2 / R16 < R16-P1 Multiple Vulnerabilities

According to it's self reported version, the installed version of Nginx Plus is R1 built on Open Source version 1.5.3-1 prior to R15-P2 or R16 built on Open Source version 1.15.2 prior to R16-P1. It is, therefore, affected by the following issues : - An unspecified error exists related to the...

8.2CVSS6.7AI score0.47057EPSS
Exploits1References7
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/21 6:28 p.m.44 views

Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - nginx (CVE-2018-16844, CVE-2018-16845, CVE-2018-16843, CVE-2019-7401)

Summary Security Vulnerabilities affect IBM Cloud Private - nginx Vulnerability Details CVEID: CVE-2018-16844 DESCRIPTION: nginx is vulnerable to a denial of service, caused by a flaw when complied with ngxhttpv2module. By sending a specially-crafted HTTP/2 request, a remote attacker could exploi...

9.8CVSS0.8AI score0.47057EPSS
Exploits1Affected Software1
CBLMariner
CBLMariner
added 2022/04/09 3:40 p.m.10 views

CVE-2017-16844 affecting package procmail for versions less than 3.22-53

CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

10CVSS9.6AI score0.12524EPSS
Exploits0
CBLMariner
CBLMariner
added 2022/04/09 3:40 p.m.12 views

CVE-2017-16844 affecting package procmail for versions less than 3.22-53

CVE-2017-16844 affecting package procmail for versions less than 3.22-53. A patched version of the package is available...

10CVSS9.6AI score0.12524EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.33 views

Mageia: Security Advisory (MGASA-2018-0459)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.1AI score0.47057EPSS
Exploits1References3
Apple
Apple
added 2021/09/20 12:0 a.m.523 views

About the security content of Xcode 13

About the security content of Xcode 13 This document describes the security content of Xcode 13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

9.8CVSS7.5AI score0.81958EPSS
Exploits10References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2019:0334-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.1AI score0.47057EPSS
Exploits1References2
Circl
Circl
added 2020/10/01 8:53 p.m.7 views

CVE-2020-16844

creationtimestamp| type| source ---|---|--- 2020-10-01 20:53:10+00:00| seen| https://t.me/cibsecurity/14992 2025-07-25 01:12:22+00:00| seen| https://gist.github.com/ferasdour/504aa49686f8e64564249de44cd5eab2...

6.8CVSS6.4AI score0.01086EPSS
Exploits1References2
CVE
CVE
added 2020/10/01 4:32 p.m.77 views

CVE-2020-16844

CVE-2020-16844 affects Istio 1.5.0–1.5.8 and 1.6.0–1.6.7, where an AuthorizationPolicy with DENY actions using wildcard suffixes (e.g., *-some-suffix) for source principals or namespaces can fail to deny access, bypassing the intended policy. The available connected documents consistently describ...

6.8CVSS6.5AI score0.01086EPSS
Exploits1References2Affected Software1
RedHat Linux
RedHat Linux
added 2020/08/11 8:55 p.m.55 views

Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 security update

An update for servicemesh is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

6.8CVSS6.7AI score0.01086EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/08/11 12:0 a.m.24 views

RHEL 8 : Red Hat OpenShift Service Mesh 1.1 (RHSA-2020:3425)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3425 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...

6.8CVSS6.6AI score0.01086EPSS
Exploits1References5
Symantec
Symantec
added 2020/05/06 6:48 p.m.144 views

Nginx Vulnerabilities Jul 2017 - Oct 2019

Summary Symantec SWG products using affected versions of Nginx may be susceptible to multiple Nginx vulnerabilities. A remote attacker can use crafted requests to obtain sensitive information or cause denial of service. An attacker can also obtain sensitive information or cause denial of service ...

7.8CVSS1.8AI score0.82567EPSS
Exploits7Affected Software2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for procmail (EulerOS-SA-2017-1316)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.12524EPSS
Exploits0References2
Rows per page
Query Builder