CVE-2022-2979

CVE-2022-2979 – Omron CX-Programmer is a use-after-free vulnerability in CX-One/CX-Programmer before v9.78. Opening a specially crafted file can cause memory reference not to be released, potentially enabling arbitrary code execution. The issue is documented by multiple sources (CISA ICS advisory...

CVE-2022-2979 Omron CX-Programmer

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution...

CVE-2012-2979

CVE-2012-2979 affects FreeBSD NSD before 3.2.13. A remote attacker can cause a crash of a NSD child server process (SIGSEGV), leading to denial of service in the NSD server. The vulnerability is exploitable over the network with no authentication and no user interaction required, with impact on a...

CVE-2019-2979

CVE-2019-2979 is a vulnerability in Oracle FLEXCUBE Direct Banking (Payments) affecting 12.0.2 and 12.0.3. The issue allows a low-privileged, network-accessible attacker (via HTTP) to compromise the product, with successful exploits requiring user interaction from someone other than the attacker....

RHEL 7 : wget (RHSA-2019:2979)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2979 advisory. The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: doconversion heap-based buffe...

CVE-2018-2979

CVE-2018-2979 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0, 11.4.0, 12.x up to 14.1.0). The vulnerability is a Denial of Service: a low-privileged attacker with network access via HTTP can cause a hang or frequent crash of the system. CVSS ...

CVE-2017-2979

CVE-2017-2979 affects Adobe Digital Editions 4.5.3 and earlier. The vulnerability is a buffer over-read in the product, which could allow an attacker to disclose information. The provided documents do not specify remediation steps or patched versions; no exploit details are given beyond the gener...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerability (USN-2979-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2979-4 advisory. Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-2979-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2979-2 advisory. USN-2979-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

Ubuntu: Security Advisory (USN-2979-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-2979-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2979-1 advisory. David Matlack discovered that the Kernel-based Virtual Machine KVM implementation in the Linux kernel did not properly restrict variable Memory Type Rang...

CVE-2015-2979

CVE-2015-2979 affects Webservice-DIC yoyaku_v41 (conference room reservation software). Concrete details from connected sources show an OS command injection (CWE-78) vulnerability that allows remote execution of arbitrary OS commands on the web server. Root cause described as improper input handl...

Debian DSA-2979-1 : fail2ban - security update

Two vulnerabilities were discovered in Fail2ban, a solution to ban hosts that cause multiple authentication errors. When using Fail2ban to monitor Postfix or Cyrus IMAP logs, improper input validation in log parsing could enable a remote attacker to trigger an IP ban on arbitrary addresses,...

CVE-2013-2979

CVE-2013-2979 is a directory traversal vulnerability in IBM Optim Performance Manager (OPM) for DB2, affecting IBM 4.1.0–4.1.1 and 5.1–5.1.1.x. A remotely authenticated attacker could craft a URL to traverse directories and read sensitive files outside the installation directory if the server pro...

Fedora Update for nsd FEDORA-2012-11203

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for nsd FEDORA-2012-11207

Check for the Version of nsd OpenVAS Vulnerability Test Fedora Update for nsd FEDORA-2012-11207 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 16 : nsd-3.2.13-1.fc16 (2012-11207)

Updated upstream releasee for CVE-2012-2979 / VU517036, our packages were not vulnerable Fix for CVE-2012-2978: NSD denial of service vulnerability from non-standard DNS packet from any host Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

FreeBSD Ports: nsd

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

Gentoo Security Advisory GLSA 201110-03 (bugzilla)

The remote host is missing updates announced in advisory GLSA 201110-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...