Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CVE-2011-2669

creationtimestamp| type| source ---|---|--- 2020-01-21 18:44:23+00:00| seen| https://t.me/cibsecurity/9320...

CVE-2011-2669

CVE-2011-2669 affects Mozilla Firefox prior to 3.6 due to an issue in certificate validation that can trigger a denial-of-service. Connected sources (e.g., JVN entries) confirm the vulnerability stems from how certificates are validated, with impact described as DoS when loading HTTPS sites with ...

CVE-2020-2669

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Ema...

CVE-2020-2669

CVE-2020-2669 affects Oracle E-Business Suite, specifically the Oracle Email Center component (Message Display). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability enables an unauthenticated, network-accessible attacker (via HTTPS) to compromise Oracle Email Center, with att...

CVE-2019-2669

CVE-2019-2669 affects Oracle E-Business Suite’s CRM Technical Foundation (Preferences subcomponent). Affected versions: 12.1.3 and 12.2.x (12.2.3–12.2.8). The vulnerability allows an unauthenticated attacker with HTTP network access to compromise the CRM Technical Foundation; attacks may require ...

Dovecot User Authentication Denial of Service Vulnerability

Dovecot is prone to a Denial of Service vulnerability within the user authentication. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2017-2669

Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through varexpand to perform %variable expansion. Sending specially crafted %variable fields could result in...

CVE-2017-2669

CVE-2017-2669 affects Dovecot before 2.2.29.1. When dict passdb/userdb is used, a crafted username may cause DoS by double-expanding %variables via var_expand(), leading to excessive memory or CPU usage. Public fixes exist: upgrading to Dovecot 2.2.29.1 (or later, e.g., 2.2.30.x per distributors)...

CVE-2018-2669

CVE-2018-2669 affects Oracle Hospitality Reporting and Analytics (subcomponent: Report) in Oracle Hospitality Applications, specifically versions 8.5.1 and 9.0.0. The flaw is exploitable over HTTP with network access by an unauthenticated attacker and requires user interaction. Successful attacks...

SUSE SLES12 Security Update : dovecot22 (SUSE-SU-2017:1250-1)

This update for dovecot22 to version 2.2.29.1 fixes the following issues: This security issue was fixed : - CVE-2017-2669: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS bsc103224...

SUSE-SU-2017:1250-1 Security update for dovecot22

This update for dovecot22 to version 2.2.29.1 fixes the following issues: This security issue was fixed: - CVE-2017-2669: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS bsc1032248...

CVE-2016-2669

...

CVE-2016-2669

CVE-2016-2669 is rejected/not used per the initial description.

Fedora Update for dovecot FEDORA-2017-da4ed58fd5

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-201705-1] dovecot: denial of service

Arch Linux Security Advisory ASA-201705-1 ========================================= Severity: Medium Date : 2017-05-01 CVE-ID : CVE-2017-2669 Package : dovecot Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-238 Summary ======= The package dovecot before version...

Ubuntu: Security Advisory (USN-3258-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3828-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3828-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 10, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3828-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3828-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 10, 2017 https://www.debian.org/security/faq -...

AIX 5.3 / 6.1 / 7.1 / 7.2 lquerylv Local Root

!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...