[SECURITY] [DLA 313-1] virtualbox-ose security update

Package : virtualbox-ose Version : 3.2.28-dfsg-1+squeeze1 CVE ID : CVE-2013-3792 CVE-2014-2486 CVE-2014-2488 CVE-2014-2489 CVE-2015-2594 Bugs : 715327 754939 792446 The latest maintenance release of the VirtualBox OSE 3.2.x series i.e., version 3.2.28 has been uploaded to Debian LTS squeeze. Than...

DLA-313-1 virtualbox-ose - security update

Bulletin has no description...

Microsoft Edge Memory Corruption (MS15-094: CVE-2015-2488; CVE-2015-2488)

A remote code execution vulnerability has been reported in Microsoft Edge. The vulnerability is due to an error in the way that Microsoft Edge accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user to open a...

Ubuntu: Security Advisory (USN-2488-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : ClamAV vulnerability (USN-2488-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2488-1 advisory. Sebastian Andrzej Siewior discovered that ClamAV incorrectly handled certain upack packer files. An attacker could possibly use this issue to cause ClamAV to cras...

CVE-2014-2488

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core...

CVE-2014-2488

Oracle VM VirtualBox is vulnerable to CVE-2014-2488, an unspecified local vulnerability in the VirtualBox core that affects the VirtualBox component prior to 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 and can impact confidentiality for local users. The available connected advisories confirm this ...

KLA10284 Multiple vulnerabilities in Oracle VirtualBox

Unspecified vulnerabilities were found in Oracle VirtualBox. By exploiting this vulnerability malicious users can affect integrity, availability and confidentiality. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Exploitation Public exploits exist for this...

Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 (Windows)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnmar13win.nasl 6093 2017-05-10 09:03:18Z teissa $ Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 Windows Authors: Arun Kalla...

[ MDVSA-2013:020 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:020 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 8, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark:...

CVE-2013-2488

The CVE-2013-2488 issue affects the DTLS dissector in Wireshark, with versions 1.6.x before 1.6.14 and 1.8.x before 1.8.6 lacking validation of the fragment offset prior to the reassembly state machine. This can cause a denial of service (application crash) due to writes to invalid memory when a ...

Debian: Security Advisory (DSA-2488-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2488

Cisco IOS XR vulnerability CVE-2012-2488 affects ASR 9000 and CRS series devices running before 4.2.1. Affected components include the Route Processor and related hardware (ASR 9000 series RSP-4G/8G, RSP440, CRS PRP) where handling of crafted packets can cause a denial of service (packet transmis...

CVE-2011-2488

CVE-2011-2488 affects Joomla! before 1.5.23. The issue is an error-handling flaw that allows remote attackers to obtain sensitive information via unspecified vectors, leading to a confidentiality disclosure. Affected component is Joomla! core (error handling path) with the underlying cause being ...

CVE-2008-2488

CVE-2008-2488 affects RoomPHPlanning 1.5. The issue is in admin/userform.php, where no administrative credentials are required, allowing remote authenticated users to create new admin accounts. This is the root cause and directly leads to privilege escalation within the application. The available...

CVE-2008-2488

creationtimestamp| type| source ---|---|--- 2008-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5674...

Debian Security Advisory DSA 1358-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1358-1. OpenVAS Vulnerability Test $Id: deb13581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1358-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

openSUSE 10 Security Update : asterisk (asterisk-3543)

This update fixes multiple bugs that allowed attackers to remotely crash asterisk or cause an information leak CVE-2007-1561, CVE-2007-1594, CVE-2007-1595, CVE-2007-2297, CVE-2007-2488. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

CVE-2007-2488

The IAX2 channel driver chaniax2 in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information memory contents or cause a denial of service application crash, by sending a frame that...

CVE-2007-2488

The CVE-2007-2488 issue affects Asterisk’s IAX2 channel driver (chan_iax2). The connected sources corroborate a vulnerability where data is not properly null-terminated, allowing remote attackers to trigger loss of transmitted data and potentially reveal memory contents or cause a denial of servi...