haproxy security update

1.5.4-4.1 - Fix bufferslowrealign function to respect output data CVE-2015-3281, 1241537...

Fedora 21 : haproxy-1.5.14-1.fc21 (2015-11255)

Security fix for CVE-2015-3281 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 22 : haproxy-1.5.14-1.fc22 (2015-11267)

Security fix for CVE-2015-3281 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[USN-2668-1] HAProxy vulnerability

========================================================================== Ubuntu Security Notice USN-2668-1 July 07, 2015 haproxy vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

FreeBSD : haproxy -- information leak vulnerability (cbfa8bd7-24b6-11e5-86ff-14dae9d210b8)

HAProxy reports : A vulnerability was found when HTTP pipelining is used. In some cases, a client might be able to cause a buffer alignment issue and retrieve uninitialized memory contents that exhibit data from a past request or session. I want to address sincere congratulations to Charlie...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

CVE-2015-3281

The bufferslowrealign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is used for pending outgoing data, which allows remote attackers to obtain sensitive information uninitialized memory contents of previous requests via a crafted request...

CVE-2015-3281

HAProxy upstream issue CVE-2015-3281 affects HAProxy 1.5.x (pre-1.5.14) and 1.6-dev, where buffer_slow_realign() mishandles the output buffer, enabling an unauthenticated remote attacker to obtain uninitialized memory from previous requests via a crafted request. Public advisories document data l...

Debian DSA-3301-1 : haproxy - security update

Charlie Smurthwaite of aTech Media discovered a flaw in HAProxy, a fast and reliable load balancing reverse proxy, when HTTP pipelining is used. A client can take advantage of this flaw to cause data corruption and retrieve uninitialized memory contents that exhibit data from a past request or...

[SECURITY] [DSA 3301-1] haproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3301-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3301-1] haproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3301-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2015 https://www.debian.org/security/faq -...

haproxy -- information leak vulnerability

HAProxy reports: A vulnerability was found when HTTP pipelining is used. In some cases, a client might be able to cause a buffer alignment issue and retrieve uninitialized memory contents that exhibit data from a past request or session. I want to address sincere congratulations to Charlie...

OracleVM 2.1 : libxml2 (OVMSA-2009-0018)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add bug347316.patch to backport fix for bug347316 from upstream version - Add libxml2-enterprise.patch and update logos in tarball - Fix a couple of crash CVE-2009-2414, CVE-2009-2416 - Resolves:...

CVE-2014-3281

CVE-2014-3281 affects Cisco’s VOSS web framework in the Unified Communications Domain Manager (CDM). The issue is an improper access control vulnerability that could allow remote attackers to view potentially sensitive user information by accessing an unspecified BVSMWeb page (Bug IDs CSCun46071/...

ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability.

ESA-2013-070.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability. EMC Identifier: ESA-2013-070 CVE Identifier: CVE-2013-3281 Severity Rating: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P Affected products: • EMC Documentum Webtop...

EMC Documentum Product Suite version 6.7 contains a DOM based cross-site scripting vulnerability

Overview EMC Documentum Product Suite version 6.7 and possibly earlier versions contain a DOM based cross-site scripting vulnerability CWE-79. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' EMC Documentum Product Suite version 6.7 and possib...

CVE-2013-3281

Cross-site scripting XSS vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6,...

CVE-2013-3281

The CVE-2013-3281 entry describes a cross-site scripting (XSS) vulnerability in EMC Documentum products (Webtop, WDK, Taskspace, Records Manager, Web Publisher, Digital Asset Manager, Administrator, Capital Projects) prior to the stated SP versions. The flaw allows remote attackers to inject arbi...

CVE-2012-3281

HP XP P9000 Command View Advanced Edition’s Device Manager prior to version 7.4.0-00 is vulnerable to remote Denial of Service via unknown vectors. The HP security bulletin confirms CVE-2012-3281 with a CVSS v2 base score of 7.8 (HIGH) and states only affected software is HP XP P9000 Command View...

[security bulletin] HPSBST02839 SSRT101077 rev.1 - HP XP P9000 Command View Advanced Edition, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03650706 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03650706 Version: 1 HPSBST02839...