[SECURITY] [DSA 3220-1] libtasn1-3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3220-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3220-1] libtasn1-3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3220-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 11, 2015 http://www.debian.org/security/faq -...

BELL-CVE-2015-2806 CVE-2015-2806 does not affect BellSoft software

Bulletin has no description...

CVE-2015-2806

CVE-2015-2806 is linked to an unspecified error in libtasn1/asn1_der_decoding within GnuTLS used by IBM Power Hardware Management Console (HMC). IBM’s bulletin lists the vulnerability as affecting Power HMC V7.9.0.0 with a base CVSS 6.8 (vector AV:N/AC:M/Au:N/C:P/I:P/A:P). Remediation provided vi...

CVE-2015-2806

Stack-based buffer overflow in asn1derdecoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors...

[USN-2559-1] Libtasn1 vulnerability

========================================================================== Ubuntu Security Notice USN-2559-1 April 08, 2015 libtasn1-3, libtasn1-6 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

Updated libtasn1 packages fix CVE-2015-2806

Updated libtasn1 packages fix security vulnerability: The libtasn1 library before version 4.4 is vulnerable to a two-byte stack overflow in asn1derdecoding CVE-2015-2806...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, and CVE-2014-2806...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2790, CVE-2014-2802, and CVE-2014-2806...

CVE-2014-2806

Microsoft Internet Explorer 11 is affected by CVE-2014-2806 (Internet Explorer Memory Corruption Vulnerability). A crafted website can allow remote attackers to execute arbitrary code or cause a denial of service via memory corruption. Public exploits exist for this vulnerability. A patch is avai...

openSUSE Security Update : libjpeg-turbo (openSUSE-SU-2012:0932-1)

fixed heap overflow bnc771791 - CVE-2012-2806.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-469. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libfreetype6 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

Debian DSA-2806-1 : nbd - privilege escalation

It was discovered that nbd-server, the server for the Network Block Device protocol, did incorrect parsing of the access control lists, allowing access to any hosts with an IP address sharing a prefix with an allowed address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

Oracle Linux 3 : freetype (ELSA-2010-0736)

From Red Hat Security Advisory 2010:0736 : Updated freetype packages that fix three security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

SuSE 11.1 Security Update : libjpeg (SAT Patch Number 6586)

This update to libjpeg fixes a heap overflow in the JPEG decompression functions. CVE-2012-2806 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

Mandriva Linux Security Advisory : libjpeg-turbo (MDVSA-2012:121)

A vulnerability has been discovered and corrected in libjpeg-turbo : A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially crafted JPEG image...

SuSE 10 Security Update : libjpeg (ZYPP Patch Number 8233)

This update to libjpeg fixes a heap overflow in the JPEG decompression functions. CVE-2012-2806 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid61567;...

Fedora Update for libjpeg-turbo FEDORA-2012-10721

Check for the Version of libjpeg-turbo OpenVAS Vulnerability Test Fedora Update for libjpeg-turbo FEDORA-2012-10721 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for libjpeg-turbo FEDORA-2012-10721

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2806

CVE-2012-2806 : libjpeg-turbo contains a heap-based buffer overflow in the get_sos() function (jdmarker.c) that can be triggered by a JPEG header with a large component count. This may crash the application or allow remote code execution. Public bulletin references (IBM, openSUSE, Gentoo, Mandriv...