Oracle MySQL Server 8.0 <= 8.0.25 Security Update (cpujul2021) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

CVE-2021-2399

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2021-2399

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2021-2399

CVE-2021-2399 is a MySQL Server (Oracle) vulnerability in the Server: DDL component. Affected versions are 8.0.25 and prior; exploitation via network with multiple protocols can cause a hang or complete denial of service. The connected advisories (MiracleLinux, ALINUX3, Rocky Linux, Red Hat, Orac...

SUSE: Security Advisory (SUSE-SU-2017:1986-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-2399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2399-1 : packagekit security update

Two vulnerabilities have been discovered in packagekit, a package management service. CVE-2020-16121 Vaisha Bernard discovered that PackageKit incorrectly handled certain methods. A local attacker could use this issue to learn the MIME type of any file on the system. CVE-2020-16122 Sami Niemimki...

openSUSE Security Update : lz4 (openSUSE-2019-2399)

This update for lz4 fixes the following issues : - CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4write32 bsc1153936. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

RHEL 7 : libssh2 (RHSA-2019:2399)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2399 advisory. The libssh2 packages provide a library that implements the SSH2 protocol. Security Fixes: libssh2: Integer overflow in transport read...

CVE-2019-2399

The CVE-2019-2399 entry affects Oracle Communications Applications’ Communications Diameter Signaling Router (DSR) security subcomponent. Affected: DSRs prior to version 8.3. Root cause described as an access control issue that permits an unauthenticated, network-based attacker (via HTTP) to read...

CVE-2018-2399

CVE-2018-2399 affects SAP Process Monitoring Infrastructure (PMI) across versions 7.10–7.11, 7.20, 7.30, 7.31, 7.40, 7.50. Root cause: inadequate encoding of user-controlled inputs leads to Cross-Site Scripting. Impact: remote attacker could execute arbitrary script in a user’s browser. Exploitat...

SUSE SLED12 / SLES12 Security Update : libquicktime (SUSE-SU-2017:1986-1)

This update for libquicktime fixes the following issues: Security issue fixed : - CVE-2016-2399: Adjust patch to prevent endless loop when there are less than 256 bytes to read. bsc1022805 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

SUSE-SU-2017:1986-1 Security update for libquicktime

This update for libquicktime fixes the following issues: Security issue fixed: - CVE-2016-2399: Adjust patch to prevent endless loop when there are less than 256 bytes to read. bsc1022805...

CVE-2015-2399

CVE-2015-2399 is rejected/not used per the Initial Description.

CVE-2017-2399

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Pasteboard" component. It allows physically proximate attackers to read the pasteboard by leveraging the use of an encryption key derived only from the hardware UID rather than that UID in...

CVE-2017-2399

CVE-2017-2399 (Pasteboard, Apple iOS) affects iOS 10.3 and earlier. The vulnerability arises from using a key derived only from the hardware UID to encrypt the pasteboard, allowing physically proximate attackers to read the pasteboard. The fix, implemented in the Apple security content for iOS 10...

SUSE SLED12 / SLES12 Security Update : libquicktime (SUSE-SU-2017:0610-1)

This update for libquicktime fixes the following issues : - A crafted MP4 file could have caused libquicktime to crash or lead to undefined behaviour bsc1022805, CVE-2016-2399 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

Debian DSA-3800-1 : libquicktime - security update

Marco Romano discovered that libquicktime, a library for reading and writing QuickTime files, was vulnerable to an integer overflow attack. When opened, a specially crafted MP4 file would cause a denial of service by crashing the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

[SECURITY] [DSA 3800-1] libquicktime security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3800-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 844-1] libquicktime security update

Package : libquicktime Version : 2:1.2.4-3+deb7u1 CVE ID : CVE-2016-2399 Debian Bug : 855099 Marco nemux Romano discovered that an integer overflow in the quicktimereadpascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other...