CVE-2014-9807

CVE-2014-9807 concerns ImageMagick's pdb coder. The entry states that remote attackers can cause a denial of service via a double free, via unspecified vectors. The connected documents do not provide vendor/version specifics, exploitation status, or fixes. There is no patch information or remedia...

CVE-2014-9806

CVE-2014-9806 affects ImageMagick. The vulnerability allows remote attackers to cause a denial of service via a crafted file, by consuming file descriptors. This is a DoS issue (availability impact) described in the public CVE entry; no additional remediation or exploitation details are provided ...

CVE-2014-9816

CVE-2014-9816 : ImageMagick vulnerability where a crafted VIFF file can cause a denial of service via out-of-bounds access. Affected product: ImageMagick (VIFF handling). Root cause and version details are not specified in the provided documents. Impact: denial of service; no exploitation details...

CVE-2014-9810

ImageMagick’s dpx file handler is affected by CVE-2014-9810, which allows remote attackers to cause a denial of service (segmentation fault and crash) by processing a malformed dpx file. The provided documents describe the vulnerability but do not specify a remediation or patched version.

CVE-2014-9811

CVE-2014-9811 affects ImageMagick via the xwd file handler. The vulnerability allows remote attackers to trigger a denial of service (segmentation fault/application crash) by processing a crafted xwd file. Public documents in the connected set corroborate the existence of this issue and describe ...

CVE-2014-9821

CVE-2014-9821 is a heap-based buffer overflow in ImageMagick triggered by a crafted xpm file. Affected component is ImageMagick’s handling of XPM input; the initial documents do not specify vendor/product versions or concrete exploit details beyond this description. No remediation details are pro...

CVE-2014-9804

vision.c in ImageMagick allows remote attackers to cause a denial of service infinite loop via vectors related to "too many object."...

CVE-2014-9809

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted xwd image...

CVE-2014-9813

ImageMagick allows remote attackers to cause a denial of service application crash via a crafted viff file...

CVE-2014-9809

CVE-2014-9809 affects ImageMagick; the vulnerability allows remote attackers to cause a denial of service (segmentation fault/application crash) via a crafted xwd image. The provided connected documents corroborate the CVE in the ImageMagick context (e.g., Nessus/RHEL advisories listing CVE-2014-...

New Mirai Variant Roars into Action With 54 Hour DDoS Attacks

A variant of the Mirai malware pummeled a U.S. college last month with a marathon 54-hour long attack. Researchers say this latest Mirai variant is a more potent version of the notorious Mirai malware that made headlines in October, targeting DNS provider Dyn and the Krebs on Security website. Th...

Oracle Linux 6 : glibc (ELSA-2017-0680)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0680 advisory. - Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function 1358015. - Fix CVE-2015-8778 glibc: Integer overflow in hcreate and hcreater...

CVE-2014-3582

Affected product: Apache Ambari. Affects Ambari server handling of SSL certificate generation for hosts in a cluster (versions 1.2.0–2.2.2). Root cause (as described): the CVE-2014-3582 condition may allow arbitrary system command execution on the Ambari Server host during the certificate generat...

UBUNTU-CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-6440

VLC media player, affected up to versions before 2.1.5, is affected by CVE-2014-6440 due to a heap overflow in the transcode module that could allow remote code execution or a denial of service. Public references in OpenVAS/Gentoo advisories confirm a heap-based overflow/remote code execution vec...

CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

CentOS 6 : glibc (CESA-2017:0680)

An update for glibc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

New Relic: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability

Hi, I get in touch to report that cloud.newrelic.com is vulnerable to CVE-2014-3566 POODLE. Websites that support SSLv3 and CBC-mode ciphers are potentially vulnerable to an active MITM Man-in-the-middle attack. This attack, called POODLE, is similar to the BEAST attack and also allows a network...