SUSE SLES12 Security Update : expat (SUSE-SU-2022:3466-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3466-1 advisory. - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c bsc1203438. Tenable has extracted the preceding description...

SUSE: Security Advisory (SUSE-SU-2014:0788-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for libmicrohttpd (FEDORA-2021-5e10ad8c19)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

CVE-2021-3466

CVE-2021-3466 affects libmicrohttpd prior to 0.9.71. Root cause: a missing bounds check in post_process_urlencoded can trigger a buffer overflow, allowing a remote attacker to write arbitrary data in apps using libmicrohttpd. Impact per sources: high risk to confidentiality, integrity, and availa...

CVE-2021-3466

A flaw was found in libmicrohttpd. A missing bounds check in the postprocessurlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and...

CVE-2020-3466

Cisco DNA Center Web UI XSS vulnerabilities (CVE-2020-3466) allow an unauthenticated, remote attacker to induce script execution in the user’s browser by persuading them to click a crafted link. The issue stems from improper input validation in the web-based management interface. Impact is limite...

Vulnerability in packaging (CVE-2019-3466)

pgctlcluster script in postgresql-common does not drop privileges when creating socket/statistics temporary directories A PostgreSQL superuser could escalate to root using a deficiency in the pgctlcluster command. pgctlcluster is a utility provided by the "postgresql-common" package that is...

CVE-2019-3466

CVE-2019-3466 concerns the pg_ctlcluster script in the PostgreSQL-related package postgresql-common. In versions prior to 210, the script did not drop privileges when creating socket/statistics temporary directories, enabling a local privilege escalation. Public disclosures reference Ubuntu/Debia...

Debian DSA-4568-1 : postgresql-common - security update

Rich Mirch discovered that the pgctlcluster script didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Ubuntu: Security Advisory (USN-4194-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. The gnutls packages also include the libtasn1 library, which provides Abstract Syntax Notation One ASN.1 parsing and structures management, and Distinguished Encoding Rules DER...

Security Bulletin: IBM Flex System Manager (FSM) is affected by vulnerability (CVE-2014-3466)

Summary IBM Flex System Manager FSM is affected by gnutls vulnerability CVE-2014-3466 which could be used to create a buffer overflow. Vulnerability Details Abstract IBM Flex System Manager FSM is affected by gnutls vulnerability CVE-2014-3466 which could be used to create a buffer overflow...

Security Bulletin: Vulnerability in Gnu Transport Layer Security (GnuTLS) affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3466).

Summary Vulnerability in Gnu Transport Layer Security GnuTLS affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-3466. Vulnerability Details CVE ID: CVE-2014-3466 DESCRIPTION: The GnuTLS library provides support for cryptographic algorithms and for protoco...

CVE-2016-3466

CVE-2016-3466 affects Oracle E-Business Suite Field Service (Oracle Field Service) Wireless subcomponent in versions 12.1.1–12.1.3. Root cause is not detailed in the provided documents, but the vulnerability allows a remote attacker to compromise confidentiality and integrity via Wireless-related...

Oracle E-Business Multiple Vulnerabilities (April 2016 CPU)

The version of Oracle E-Business installed on the remote host is missing the April 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - An unspecified flaw exists in the DB Privileges subcomponent of the Oracle Applications Object...

Debian DSA-3466-1 : krb5 - security update

Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-8629 It was discovered that an authenticated attacker can cause kadmind to read beyond the end of allocated memory b...

[SECURITY] [DSA 3466-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 04, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3466-1 (krb5 - security update)

Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-8629 It was discovered that an authenticated attacker can cause kadmind to read beyond the end of allocated memory by...

Debian: Security Advisory (DSA-3466-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...