CVE-2015-1989

IBM QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 is affected by CVE-2015-1989 due to an SQL injection vulnerability. A remote attacker could send specially crafted SQL statements to view, add, modify, or delete data in the back end. The NVD lists a base score of 6.5 (Medium) with network ...

Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...

CentOS 6 : libX11 / libXcursor / libXext / libXfixes / libXi / libXinerama / libXp / libXrandr / etc (CESA-2014:1436)

Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

openSUSE Security Update : libXv (openSUSE-SU-2013:1010-1)

This update of libXrender fixes several buffer and integer overflow issues. - U0001-integer-overflow-in-XvQueryPortAttributes-CVE-201 3-1.patch, U0002-integer-overflow-in-XvListImageFormats-CVE-2013-1 989.patch, U0003-integer-overflow-in-XvCreateImage-CVE-2013-1989-3 -3.patch - integer overflow i...

openSUSE Security Update : puppet (openSUSE-SU-2012:0608-1)

puppet was prone to several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-269. The text description of this plugin is C SUSE LLC...

CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls...

CVE-2014-1989

Cybozu Garoon vulnerability CVE-2014-1989: Cybozu Garoon versions 3.0–3.7 SP3 contain an API access restriction bypass that allows users who can log in to delete schedule information they are not permitted to edit. Root cause described as an API access restriction bypass; impact is remote authent...

Ubuntu 12.04 LTS / 12.10 / 13.04 : icu vulnerabilities (USN-1989-1)

It was discovered that ICU contained a race condition affecting multi- threaded applications. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program. This issue only affecte...

Fedora Update for libXv FEDORA-2013-11734

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.3 Security Update : xorg-x11-libXv (SAT Patch Number 7943)

This update of xorg-x11-libXv fixes several integer and buffer overflow issues. Bug 815451/821671 CVE-2013-1989 / CVE-2013-2066 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...

Fedora 19 : libXv-1.0.9-1.fc19 (2013-11734)

Ensure the attribute's name is always null-terminated and points to valid memory. Otherwise, if an integer overflow CVE-2013-1989 triggers, the returned buffer pointed to uninitialized memory see https://bugs.freedesktop.org/showbug.cgi?id=65252. Note that Tenable Network Security has extracted t...

Fedora 18 : libXv-1.0.7-5.20130524git50fc4cb18.fc18 (2013-9188)

Update to latest git to fix the following CVEs: CVE-2013-1989, CVE-2013-2066 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2013-1989

X.Org libXv (libXv 1.0.7 and earlier) is vulnerable due to multiple integer overflows in the XvQueryPortAttributes, XvListImageFormats, and XvCreateImage functions. This memory/buffer overflow could allow a remote attacker connecting to a malicious X server to overflow a buffer and potentially ex...

Fedora Update for libXv FEDORA-2013-9188

Check for the Version of libXv OpenVAS Vulnerability Test Fedora Update for libXv FEDORA-2013-9188 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora 19 : libXv-1.0.7-5.20130524git50fc4cb18.fc19 (2013-9066)

Update to latest git to fix the following CVEs: CVE-2013-1989, CVE-2013-2066 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] [DSA 2674-1] libxv security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2674-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

CVE-2012-1989

telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise PE 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log /tmp/out.log...

CVE-2012-1989

telnet.rb in Puppet 2.7.x before 2.7.13 and Puppet Enterprise PE 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows local users to overwrite arbitrary files via a symlink attack on the NET::Telnet connection log /tmp/out.log...

CVE-2012-1989

CVE-2012-1989 affects Puppet: telnet.rb in Puppet 2.7.x (before 2.7.13) and Puppet Enterprise 1.2.x, 2.0.x, and 2.5.x (before 2.5.1) allows a local user to perform a symlink attack on the NET::Telnet connection log (/tmp/out.log) and overwrite arbitrary files. Root cause: improper handling of tem...

FreeBSD Ports: puppet

The remote host is missing an update to the system as announced in the referenced advisory. VID 607d2108-a0e4-423a-bf78-846f2a8f01b0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 607d2108-a0e4-423a-bf78-846f2a8f01b0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...