CentOS 6 : libX11 / libXcursor / libXext / libXfixes / libXi / libXinerama / libXp / libXrandr / etc (CESA-2014:1436)

Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

CVE-2014-7650

The CVE-2014-7650 entry concerns the Android 1.0 JJA app (com.felix.jja), which does not verify X.509 certificates from SSL servers. Root cause: lack of certificate validation enabling MITM-style spoofing of servers and potential exposure of sensitive data. Affected component is the app’s SSL/TLS...

openSUSE Security Update : libXrandr (openSUSE-SU-2013:1028-1)

This update of libXrandr fixes several integer overflow issues. - U0001-integer-overflow-in-XRRQueryOutputProperty-CVE-20 13-.patch, U0003-integer-overflow-in-XRRGetOutputProperty-CVE-2013 -19.patch, - integer overflow in XRRQueryOutputProperty, XRRGetProviderProperty CVE-2013-1986 bnc821663,...

openSUSE Security Update : puppet (openSUSE-SU-2012:0608-1)

puppet was prone to several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-269. The text description of this plugin is C SUSE LLC...

CVE-2014-1986

The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application...

CVE-2014-1986

The CVE refers to the Content Provider in KOKUYO S&T Co.’s CamiApp for Android (V1.21.1 and earlier). The root cause is that access permissions are not restricted, allowing a crafted or malicious Android application to read (and potentially modify) database information. Affected product: CamiApp ...

Microsoft Office Excel Record Parsing Use After Free (MS11-072) - Ver2 (CVE-2011-1986)

A remote code execution vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to lack of validation of certain record structures while handling specially crafted Excel files. A remote attacker could trigger this vulnerability by enticing an unsuspecting user to open ...

Ubuntu Update for nas USN-1986-1

Check for the Version of nas OpenVAS Vulnerability Test $Id: gbubuntuUSN19861.nasl 8494 2018-01-23 06:57:55Z teissa $ Ubuntu Update for nas USN-1986-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...

Ubuntu 12.04 LTS / 12.10 / 13.04 : nas vulnerabilities (USN-1986-1)

Hamid Zamani discovered multiple security issues in the Network Audio System NAS server. An attacker could possibly use these issues to cause a denial of service or execute arbitrary code. CVE-2013-4256, CVE-2013-4257. Note that Tenable Network Security has extracted the preceding description blo...

SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 7944)

This update of xorg-x11-libs fixes several integer and buffer overflow issues. Bug 815451/821663 CVE-2013-1984 / CVE-2013-1985 / CVE-2013-1986 / CVE-2013-1988 / CVE-2013-1990 / CVE-2013-1991 / CVE-2013-1992 / CVE-2013-1995 / CVE-2013-1996 / CVE-2013-1998 / CVE-2013-1999 / CVE-2013-2000 /...

SuSE 11.2 Security Update : xorg-x11-libs (SAT Patch Number 7846)

This update of xorg-x11-libs fixes several integer and buffer overflow issues. bnc815451, bnc821663 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...

CVE-2013-1986

Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XRRQueryOutputProperty and 2 XRRQueryProviderProperty functions...

CVE-2013-1986

CVE-2013-1986 documents multiple integer overflow flaws in X.Org X11 libXrandr 1.4.0 and earlier that enable a X server to allocate insufficient memory and to trigger a buffer overflow via XRRQueryOutputProperty and XRRQueryProviderProperty. Connected sources confirm this affects the X11 librarie...

Ubuntu 12.04 LTS / 12.10 / 13.04 : libxrandr, libxrandr-lts-quantal vulnerability (USN-1862-1)

Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding...

Fedora Update for libXrandr FEDORA-2013-9137

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : libXrandr-1.4.0-4.20130524gitc90f74497.fc18 (2013-9137)

Update to latest git to fix the following CVEs: CVE-2013-1986 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 19 : libXrandr-1.4.0-4.20130524gitc90f74497.fc19 (2013-9056)

Update to latest git to fix the following CVEs: CVE-2013-1986 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] [DSA 2684-1] libxrandr security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2684-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2684-1] libxrandr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2684-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

puppet: Filebucket denial of service

Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to 1 cause a denial of service memory consumption via a REST request to a stream tha...