CVE-2017-2061

...

CVE-2017-2061

CVE-2017-2061 entry is rejected and not used.

CVE-2016-2061

CVE-2016-2061 is described in connected EulerOS/Nessus content as an integer signedness error in the Linux kernel MSM V4L2 video driver (3.x), used in Qualcomm QuIC MSM contributions. It can allow privilege escalation or a denial-of-service via a crafted application that triggers msm_isp_axi_crea...

CVE-2002-2061

Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values and an 8-bit or 16-bit alpha channel...

autodesk.com XSS vulnerability

Vulnerable URL: http://www.autodesk.com/cgi-bin/newformproc.pl/arcrequests/WOWXSS Details: Description| Value ---|--- Patched:| Yes, at 25.08.2015 Latest check for patch:| 25.08.2015 19:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2061 Google Pagerank| 8 V...

CVE-2015-2061

Summary of factual details for CVE-2015-2061 : The vulnerability affects the browser plugin of PTC Creo View . The root cause is a heap-based buffer overflow triggered by setting a large buffer to an attribute within the plugin, leading to the possibility of remote code execution. Exploitation de...

CVE-2014-2061

Vulnerability details for CVE-2014-2061: Jenkins prior to 1.551 and LTS prior to 1.532.2 contains an input control bug in PasswordParameterDefinition that lets remote attackers obtain passwords by reading the HTML source, related to the default value. The issue affects the vulnerable password par...

Ubuntu Update for keystone USN-2061-1

Check for the Version of keystone OpenVAS Vulnerability Test $Id: gbubuntuUSN20611.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for keystone USN-2061-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu: Security Advisory (USN-2061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.2 Security Update : openvpn (SAT Patch Number 8496)

OpenVPN used a non-constant-time memcmp in HMAC comparison in openvpndecrypt that might have allowed remote attackers to gain knowledge of plaintext data. CVE-2013-2061 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.3 Security Update : openvpn (SAT Patch Number 8493)

OpenVPN used a non-constant-time memcmp in HMAC comparison in openvpndecrypt that might have allowed remote attackers to gain knowledge of plaintext data. CVE-2013-2061 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

KLA10281 OSI vulnerability in OpenVPN

An unspecified vulnerability was found in OpenVPN. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a timing attack. Original advisories - Related products OpenVPN CVE list CVE-2013-2061 warning Solution Update to...

Amazon Linux AMI : openvpn (ALAS-2013-201)

The openvpndecrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the CBC mode cipher. ...

Low: openvpn

Issue Overview: The openvpndecrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the C...

Mandriva Linux Security Advisory : openvpn (MDVSA-2013:167)

Updated openvpn package fixes security vulnerability : OpenVPN 2.3.0 and earlier running in UDP mode are subject to chosen ciphertext injection due to a non-constant-time HMAC comparison function. Plaintext recovery may be possible using a padding oracle attack on the CBC mode cipher implementati...

Fedora Update for openvpn FEDORA-2013-7552

Check for the Version of openvpn OpenVAS Vulnerability Test Fedora Update for openvpn FEDORA-2013-7552 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openvpn FEDORA-2013-7552

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2061

The CVE-2012-2061 entry affects Drupal's Admin tools module. The underlying issue is CSRF due to not checking tokens in the module, enabling remote attackers to hijack the authentication of unspecified victims via CSRF vectors. The vulnerability description explicitly identifies the token-checkin...

Debian Security Advisory DSA 2061-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 2061-1. OpenVAS Vulnerability Test $Id: deb20611.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2061-1 samba Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2061-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...