CVE-2015-2190

Wireshark 1.12.x is affected by CVE-2015-2190 due to the LLDP dissector (epan/proto.c) mishandling integer data types larger than 32 bits. A crafted LLDP packet can trigger an assertion failure, leading to a DoS (application exit). The issue is fixed in Wireshark 1.12.4 (also reflected in related...

KLA10518 Denial of service vulnerabilities in Wireshark

Integer overflows and other unspecified vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed packet. Original advisories Wireshark advisories Related...

IBM Tivoli Storage Manager Server 6.1.x Multiple Vulnerabilities

The version of IBM Tivoli Storage Manager installed on the remote host is 6.1 running on Windows or AIX. It is, therefore, potentially affected by multiple flaws in its bundled SSL library: - A flaw that could allow a remote attacker to cause a denial of service via a specially crafted...

IBM Tivoli Storage Manager Server 6.2.x < 6.2.6.0 Multiple Vulnerabilities

The version of IBM Tivoli Storage Manager installed on the remote host is 6.2.x prior to 6.2.6.0. It is, therefore, potentially affected by multiple flaws in its bundled SSL library: - A flaw that could allow a remote attacker to cause a denial of service via a specially crafted 'ClientHello'...

openSUSE Security Update : clutter (openSUSE-SU-2013:1540-1)

clutter was updatd to fix improper translation of hierarchy events gnome-shell crash after system resume CVE-2013-2190, bnc843441. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2014-2190

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless aka BAC-TW allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and CSCuo26389...

CVE-2014-2190

Cisco BAC-TW’s web framework suffers a CSRF vulnerability where an unauthenticated attacker can trick an authenticated user into performing changes on the BAC-TW interface. The issue stems from insufficient CSRF protections, enabling cross-site requests that may modify BAC-TW settings. Cisco’s ad...

Ubuntu: Security Advisory (USN-2190-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : JBIG-KIT vulnerability (USN-2190-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2190-1 advisory. Florian Weimer discovered that JBIG-KIT incorrectly handled certain malformed images. If a user or automated system were tricked into processing a specially craft...

Mandriva Linux Security Advisory : clutter (MDVSA-2013:255)

Updated clutter packages fix security vulnerability : A security flaw was found in the way Clutter, an open source software library for creating rich graphical user interfaces, used to manage translation of hierarchy events in certain circumstances when underlying device disappeared, causing...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

CVE-2013-2190

The CVE-2013-2190 issue affects Clutter, specifically the translate_hierarchy_event handling in clutter-device-manager-xi2.c. When resuming, XIQueryDevice errors from a disappeared device were not handled correctly, causing gnome-shell to crash and potentially allow a local attacker to access the...

MGASA-2013-0312 Updated clutter packages fix CVE-2013-2190

Updated clutter packages fix security vulnerability: A security flaw was found in the way Clutter, an open source software library for creating rich graphical user interfaces, used to manage translation of hierarchy events in certain circumstances when underlying device disappeared, causing...

Updated clutter packages fix CVE-2013-2190

Updated clutter packages fix security vulnerability: A security flaw was found in the way Clutter, an open source software library for creating rich graphical user interfaces, used to manage translation of hierarchy events in certain circumstances when underlying device disappeared, causing...

CVE-2012-2190

The provided connected sources confirm CVE-2012-2190 (TLS ClientHello crafted message causing DoS/daemon crash), CVE-2012-2191 (Vaudenay SSL CBC timing issue), and CVE-2012-2203 (PKCS#12 without integrity) involve IBM GSKit in multiple IBM products (WebSphere Application Server/IBM HTTP Server, I...

Fedora Update for cherokee FEDORA-2011-12657

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cherokee FEDORA-2011-14622

Check for the Version of cherokee OpenVAS Vulnerability Test Fedora Update for cherokee FEDORA-2011-14622 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 15 : cherokee-1.2.101-1.fc15 (2011-14634)

Latest 1.2.x upstream release Resolves bz 746532 - put some deps back: GeoIP-devel openldap-devel Latest 1.2.x upstream release .spec corrections for optional build for systemd Resolves bz 710474 Resolves bz 713307 Resolves bz 680691 Note that Tenable Network Security has extracted the preceding...

Fedora Update for cherokee FEDORA-2011-14660

Check for the Version of cherokee OpenVAS Vulnerability Test Fedora Update for cherokee FEDORA-2011-14660 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for cherokee FEDORA-2011-14634

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...