33563 matches found
CVE-2014-2656
This CVE entry is rejected/not used and does not represent an active vulnerability.
Oracle Linux 5 : openssl (ELSA-2016-1137)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-1137 advisory. - fix CVE-2014-3570 - Bignum squaring may produce incorrect results - fix CVE-2014-3571 - DTLS segmentation fault in dtls1getrecord - fix CVE-2014-3572 - ECDHE...
Ubuntu: Security Advisory (USN-2987-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openssl security update
0.9.8e-40.0.1 - To disable SSLv2 client connections create the file /etc/sysconfig/openssl-ssl-client-kill-sslv2 John Haxby orabug 21673934 - Backport openssl 08-Jan-2015 security fixes John Haxby orabug 20409893 - fix CVE-2014-3570 - Bignum squaring may produce incorrect results - fix...
GLSA-201605-05 : Linux-PAM: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201605-05 Linux-PAM: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Linux-PAM. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause Denial of Service,...
GLSA-201605-04 : rsync: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201605-04 rsync: Multiple vulnerabilities Multiple vulnerabilities have been discovered in rsync. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could write arbitrary files via symlink...
[SECURITY] [DLA 492-1] pdns security update
Package : pdns Version : 3.1-4.1+deb7u1 CVE ID : CVE-2014-7210 It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected. For Debian 7 "Wheezy", these problems have been fixed in version 3.1-4.1+deb7u...
Ubuntu 14.04 LTS : GNU C Library regression (USN-2985-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2985-2 advisory. USN-2985-1 fixed vulnerabilities in the GNU C Library. The fix for CVE-2014-9761 introduced a regression which affected applications that use the libm library but...
Ubuntu: Security Advisory (USN-2985-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2985-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-490-1 bozohttpd - security update
Bulletin has no description...
CVE-2014-3672
The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service host disk consumption by writing to stdout or stderr...
CVE-2014-3672
CVE-2014-3672 affects the qemu implementation in libvirt (before 1.3.0) and Xen. Local guest OS users can trigger a denial of service on the host (host disk consumption) by writing to stdout or stderr. Root cause details and specific impacted versions are stated in the public CVE description; rem...
F5 Networks BIG-IP : SNMP vulnerability (K17315)
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service snmptrapd crash via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu...
CVE-2014-9767
CVE-2014-9767 is a directory traversal vulnerability in PHP’s ZipArchive::extractTo (ext/zip/php_zip.c) and HHVM’s ext/zip/ext_zip.cpp. It affects PHP versions before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, as well as HHVM before 3.12.1, allowing remote attackers to create arbitrary...
openSUSE Security Update : imlib2 (openSUSE-2016-600)
This imlib2 update to version 1.4.9 fixes the following issues : Security issues fixed : - CVE-2011-5326: divide by 0 when drawing an ellipse of height 1 boo974202 - CVE-2014-9762: segmentation fault on images without colormap boo963796 - CVE-2014-9764: segmentation fault when opening specificall...
SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2016:1351-1)
This update for SystemD provides fixes and enhancements. The following security issue has been fixed : - Don't allow read access to journal files to users. bsc972612, CVE-2014-9770, CVE-2015-8842 The update package also includes non-security fixes. See advisory for details. Note that Tenable...
SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2016:1346-1)
This update for SystemD provides fixes and enhancements. The following security issue has been fixed : - Don't allow read access to journal files to users. bsc972612, CVE-2014-9770, CVE-2015-8842 The update package also includes non-security fixes. See advisory for details. Note that Tenable...
Open-Xchange: Outdated Apache Server in www.dovecot.fi is vulnerable to various attack.
Apache HTTP Server NULL Pointer Dereference Vulnerability CVE 2014-3581. Apache HTTP Server 2.4.10 and earlier is prone to a vulnerability, which can be exploited to cause a DoS Denial of Service. The vulnerability exists because the application contains flaw in the cachemergeheadersout function...