Ubuntu: Security Advisory (USN-3310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : lintian vulnerability (USN-3310-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3310-1 advisory. Jakub Wilk discovered that lintian incorrectly handled deserializing certain YAML files. If a user or automated system were tricked into running lintian on a...

SUSE SLED12 / SLES12 Security Update : ppp (SUSE-SU-2017:0474-1)

The ppp package was updated to fix the following security issue : - CVE-2015-3310: Fixed a buffer overflow in radius plug-in's rcmksid bsc927841. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2017:0474-1 Security update for ppp

The ppp package was updated to fix the following security issue: - CVE-2015-3310: Fixed a buffer overflow in radius plug-in's rcmksid bsc927841...

SUSE-SU-2017:0473-1 Security update for ppp

The ppp package was updated to fix the following security issue: - CVE-2015-3310: Fixed a buffer overflow in radius plug-in's rcmksid bsc927841...

CVE-2017-3310

CVE-2017-3310 affects Oracle Database Server’s OJVM component in versions 11.2.0.4 and 12.1.0.2. The vulnerability allows a low-privileged attacker with Create Session and Create Procedure privileges, with network access via multiple protocols, to compromise OJVM. The exploitation requires user i...

GLSA-201701-50 : PPP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201701-50 PPP: Buffer overflow A buffer overflow was discovered in the rcmksid function in plugins/radius/util.c in PPP when the PID for pppd is greater than 65535. Impact : A remote attacker could cause a Denial of Service...

CVE-2016-3310

CVE-2016-3310 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows versions. The issue arises in kernel‑mode drivers where improper handling of memory objects enables a local user to execute code with SYSTEM privileges via a crafted application. This is a local, non‑authent...

CVE-2016-3309

CVE-2016-3309 is a Windows kernel Win32k elevation-of-privilege vulnerability. A local attacker could gain SYSTEM privileges by exploiting a pool/handle-management issue in win32k, enabling code execution in kernel mode. Connected sources document an exploit (win32kfull!bFill pool overflow) and i...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3310 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...

Microsoft Win32k Elevation of Privilege (MS16-098: CVE-2016-3310)

An elevation of privilege vulnerability exists in Windows Win32k. The vulnerability is caused when the graphical sub component fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...

openSUSE Security Update : ppp (openSUSE-2015-827)

The ppp package was updated to fix one security issue. - CVE-2015-3310: Fixed buffer overflow in radius plug-ins rcmksid bnc927841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Debian DSA-3310-1 : freexl - security update

It was discovered that an integer overflow in freexl, a library to parse Microsoft Excel spreadsheets may result in denial of service if a malformed Excel file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Debian Security Advisory DSA 3310-1 (freexl - security update)

It was discovered that an integer overflow in freexl, a library to parse Microsoft Excel spreadsheets may result in denial of service if a malformed Excel file is opened. OpenVAS Vulnerability Test $Id: deb3310.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3310-1 usin...

Mandriva Linux Security Advisory : ppp (MDVSA-2015:222)

Updated ppp packages fix security vulnerability : Emanuele Rocca discovered that ppp was subject to a buffer overflow when communicating with a RADIUS server. This would allow unauthenticated users to cause a denial-of-service by crashing the daemon CVE-2015-3310. %NASLMINLEVEL 70300 C Tenable...

CVE-2015-3310

Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...

CVE-2015-3310

CVE-2015-3310 affects the Paul’s PPP Package (ppp) prior to 2.4.7. A buffer overflow in the rc_mksid() function (plugins/radius/util.c) occurs when the pppd PID > 65535, allowing remote attackers to crash the PPP daemon by sending a crafted RADIUS start accounting message, i.e., a DoS conditio...

[slackware-security] ppp

New ppp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/ppp-2.4.5-i486-3slack14.1.txz: Rebuilt. Fixed a potential security issue in parsing option files. Fixed remotel...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : ppp (SSA:2015-111-11)

New ppp packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-111-11. The text itself...

CVE-2014-3310

The Cisco advisory for CVE-2014-3310 reports an authentication-free, remote arbitrary file download vulnerability in the File Transfer feature of WebEx Meetings Client/Server/Meeting Center. The issue arises because the receiving client does not verify that the requested file matches the offered ...