openSUSE: Security Advisory for tiff (openSUSE-SU-2018:0097-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : rsync (openSUSE-2018-34)

This update for rsync fixes the several issues. These security issues were fixed : - CVE-2017-17434: The daemon in rsync did not check for fnamecmp filenames in the daemonfilterlist data structure in the recvfiles function in receiver.c and also did not apply the sanitizepaths protection mechanis...

openSUSE Security Update : tiff (openSUSE-2018-31)

This update for tiff to version 4.0.9 fixes the following issues : Security issues fixed : - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools bsc969783. - CVE-2015-7554: Fix invalid write in tiffsplit / TIFFVGetField bsc960341. - CVE-2016-10095: Fix stack-based...

CVE-2014-9485

Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...

Debian: Security Advisory (DLA-928-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2018:0073-1)

This update for tiff to version 4.0.9 fixes the following issues: Security issues fixed : - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools bsc969783. - CVE-2015-7554: Fix invalid write in tiffsplit / TIFFVGetField bsc960341. - CVE-2016-10095: Fix stack-based...

pfSense 2.1.4 - status_rrd_graph_img.php Command Injection

pfSense 2.1.4 - statusrrdgraphimg.php Command Injection !/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/ol...

pfSense < 2.1.4 - status_rrd_graph_img.php Command Injection Exploit

Exploit for php platform in category web applications !/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/old/...

pfSense 2.1.3 status_rrd_graph_img.php Command Injection

!/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/old/ Version: =2.1.3 Tested on: FreeBSD 8.3-RELEASE-p16 CV...

SUSE SLES12 Security Update : glibc (SUSE-SU-2018:0076-1)

This update for glibc fixes the following issues : - A privilege escalation bug in the realpath function has been fixed. CVE-2018-1000001, bsc1074293 - A buffer manipulation vulnerability in nscd has been fixed that could possibly have lead to an nscd daemon crash or code execution as the user...

pfSense < 2.1.4 - 'status_rrd_graph_img.php' Command Injection

!/usr/bin/env python3 Exploit Title: pfSense = 2.1.3 statusrrdgraphimg.php Command Injection. Date: 2018-01-12 Exploit Author: absolomb Vendor Homepage: https://www.pfsense.org/ Software Link: https://atxfiles.pfsense.org/mirror/downloads/old/ Version: =2.1.3 Tested on: FreeBSD 8.3-RELEASE-p16 CV...

CVE-2014-3471

Use-after-free vulnerability in hw/pci/pcie.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service QEMU instance crash via hotplug and hotunplug operations of Virtio block devices...

CVE-2014-6437

CVE-2014-6437 concerns Aztech ADSL devices (DSL5018EN 1T1R, DSL705E, DSL705EU) where an information-disclosure vulnerability exists involving ROM file vectors. The NVD entry describes remote attackers obtaining sensitive device configuration data, with CVSS nvd2.0 base score 5.0 (Network, Low att...

CVE-2014-3471

The CVE-2014-3471 issue is a use-after-free in QEMU’s hw/pci/pcie.c that enables a local guest OS user to crash a QEMU instance via hotplug/hotunplug of Virtio block devices. Root cause is a use-after-free condition; impact is a denial of service (QEMU crash) as described across multiple sources....

CVE-2014-8166

CVE-2014-8166 affects the CUPS server’s web/browsing feature, where ANSI escape sequences are not filtered from shared printer names. This could allow remote attackers to execute arbitrary code by supplying a crafted printer name. The issue is consistently described across multiple advisories (SU...

CVE-2014-7952

CVE-2014-7952 affects the Android backup/restore flow via ADB. The backup manager does not filter the data stream from apps’ BackupAgent, enabling a malicious BackupAgent (no Android permissions) to inject extra APKs into the backup archive. Upon restoration, the system installs the injected APKs...

CVE-2014-8166

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name...

CVE-2014-6435

CVE-2014-6435 affects Aztech ADSL router models DSL5018EN (1T1R), DSL705E, and DSL705EU. The vulnerability is in the CGI script /cgi-bin/AZ_Retrain.cgi which does not require authentication, enabling an unauthenticated remote attacker to trigger a denial of service by resetting WAN connectivity. ...

CVE-2014-6435

cgi-bin/AZRetrain.cgi in Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service WAN connectivity reset via a direct request...

CVE-2014-8166

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name...