101 matches found
Debian DLA-2037-1 : spamassassin security update
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805 Malicious rule or configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios. CVE-2019-12420 Specially crafted mulitpar...
FreeBSD : GNU cpio -- multiple vulnerabilities (f59af308-07f3-11ea-8c56-f8b156b6dcc8)
Sergey Poznyakoff reports : This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2016-2037: The cpiosafernamesuffix function ...
RHEL 7 : fence-agents (RHSA-2019:2037)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2037 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...
CVE-2019-2037
CVE-2019-2037 affects Android: the issue resides in l2cu_send_peer_config_rej in l2c_utils.cc, where an incorrect bounds check allows an out-of-bounds read, enabling remote information disclosure without extra privileges and without user interaction. Affected versions include Android 7.0, 7.1.1, ...
CVE-2018-2037
CVE-2018-2037 entry is rejected and not used as an active vulnerability.
RHEL 7 : podman (RHSA-2018:2037)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:2037 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...
Security Bulletin: Vulnerability in Python-httplib2 affects PowerKVM (CVE-2013-2037)
Summary PowerKVM is affected by a vulnerability in python-httplib2. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2013-2037 DESCRIPTION: The python-httplib2 could allow a remote attacker to obtain sensitive information, caused by the improper validation of https certificates. ...
CVE-2017-2037
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
Joomla com_blog v1.6 - (Pid) SQL Injection Vulnerability
Document Title: =============== Joomla comblog v1.6 - Pid SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2037 Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 203...
openSUSE Security Update : cpio (openSUSE-2017-209)
This update for cpio fixes two issues. This security issue was fixed : - CVE-2016-2037: The cpiosafernamesuffix function in util.c in cpio allowed remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file bsc963448. This non-security issue was fixed : - bsc1020108:...
SUSE SLED12 / SLES12 Security Update : cpio (SUSE-SU-2017:0366-1)
This update for cpio fixes two issues. This security issue was fixed : - CVE-2016-2037: The cpiosafernamesuffix function in util.c in cpio allowed remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file bsc963448. The update package also includes non-security...
CVE-2016-2037
The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a crafted cpio file...
Mageia: Security Advisory (MGASA-2016-0063)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-2037)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for python-httplib2 FEDORA-2015-5503
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-2037
Openswan 2.6.40 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads. NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466...
CVE-2014-2037
OpenSwan 2.6.40 is affected by CVE-2014-2037. The vulnerability allows remote attackers to cause a denial of service via IKEv2 packets that lack expected payloads, leading to a NULL pointer dereference and a restart of the IKE daemon. The issue is noted as stemming from an incomplete fix for CVE-...
openSUSE Security Update : flash-player (openSUSE-SU-2012:0723-1)
Adobe Flash Player was updated to 11.2.202.236, fixing lots of bugs and critical security issues. We also disabled inclusion of mms.cfg again, as it caused trouble on hardware accelerated systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...