36178 matches found
[SECURITY] [DLA 2075-1] jsoup security update
Package : jsoup Version : 1.8.1-1+deb8u1 CVE ID : CVE-2015-6748 An issue has been found in jsoup, a Java HTML parser that makes sense of real-world HTML soup. Due to bad handling of missing at EOF a cross-site scripting XSS vulnerability could appear. For Debian 8 "Jessie", this problem has been...
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
AZL-6832 CVE-2015-9541 affecting package qt5-qtsvg for versions less than 5.12.11-3
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
CVE-2015-1202
CVE-2015-1202 is rejected/not used; this ID does not represent an active vulnerability entry.
CVE-2015-9541
CVE-2015-9541 affects Qt up to 5.14 where a crafted SVG can trigger exponential XML entity expansion in QXmlStreamReader, enabling a likely denial of service. Public docs mainly tie this to Qt-based SVG/XML handling; remediation is to upgrade affected Qt packages (e.g., qt5-qtbase) to a version t...
CVE-2015-9541
Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564...
CVE-2015-1525
audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service audiopolicy application outage via a crafted application that provides a NULL device address...
CVE-2015-2688
bufpullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service assertion failure and daemon exit via crafted packets...
CVE-2015-2928
The Hidden Service HS server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors...
CVE-2015-2929
The Hidden Service HS client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service assertion failure and application exit via a malformed HS descriptor...
CVE-2015-2688
bufpullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service assertion failure and daemon exit via crafted packets...
CVE-2015-2688
CVE-2015-2688 affects Tor versions before 0.2.4.26 and 0.2.5.x before 0.2.5.11. The issue is a failure to handle unexpected arrival times of buffers with invalid layouts in buf_pullup, allowing remote attackers to trigger an assertion failure and daemon exit (denial of service). No exploitation d...
CVE-2015-2689
CVE-2015-2689 affects Tor releases prior to 0.2.4.26 and 0.2.5.x prior to 0.2.5.11, caused by improper handling of pending-connection resolve states during periods of high DNS load. This enables remote attackers to trigger a denial of service (assertion failure and daemon exit) via crafted packet...
CVE-2015-2929
CVE-2015-2929 affects the Hidden Service client in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7. A malformed HS descriptor can cause a denial of service (assertion failure and application exit) on remote servers. Connected sources corroborate the remediation path: upgr...
CVE-2015-2928
In CVE-2015-2928, the Hidden Service server in Tor is vulnerable to remote Denial of Service via unspecified vectors in older releases: Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7. The issue causes an assertion failure and daemon exit. Remediation is to upgrade to the...
CVE-2015-4041
The keycomparemb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by multibyte characters, which allows attackers to cause a denial of service heap-based buffer overflow and application crash ...
CVE-2015-1525
CVE-2015-1525 (Android prior to 5.1) targets the AudioPolicyManagerBase.cpp. The vulnerability arises when the system processes a crafted application that provides a NULL device address, allowing a denial of service (audio_policy outage). Root cause is indicated as a NULL-pointer/invalid device a...