SUSE-SU-2021:1523-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. - CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal bsc1185410. - CVE-2021-3516: Fixed a use after free in...

CentOS 8 : kernel (CESA-2019:3517)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3517 advisory. - kernel: Linux stack ASLR implementation Integer overflow CVE-2015-1593 - kernel: nfs: use-after-free in svcprocesscommon CVE-2018-16884 - kernel:...

CVE-2020-3517

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service DoS condition on an affected device. The attack vector is configuration dependent and...

CVE-2020-3517

The CVE-2020-3517 issue affects Cisco FXOS and NX-OS Software, specifically the Cisco Fabric Services component. The vulnerability arises from insufficient error handling when parsing Cisco Fabric Services messages, enabling an unauthenticated attacker to trigger process crashes that could result...

Cisco Patches 'High-Severity' Bugs Impacting Switches, Fibre Storage

Cisco Systems disclosed eight high-severity bugs impacting a range of its networking gear, including its switches and fiber storage solutions. Cisco’s NX-OS was hardest hit, with six security alerts tied to the network operating system that underpins the networking giant’s Nexus-series Ethernet...

CVE-2013-3517

Cross-site scripting XSS vulnerability in NETGEAR WNR3500U and WNR3500L...

CVE-2013-3517

The CVE-2013-3517 entry concerns a Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L devices. Available connected data confirms the affected products (NETGEAR WNR3500U/L) and the general impact as XSS, but does not provide concrete details on the vulnerable component, root...

Ubuntu 14.04 LTS / 16.04 LTS : poppler vulnerabilities (USN-3517-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3517-1 advisory. It was discovered that poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file,...

CVE-2017-3517

The CVE-2017-3517 issue affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC subcomponent) in version 9.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to read data from JD Edwards EnterpriseOne Tools and to cause a partial denial of service, per CVS...

CVE-2016-3517

CVE-2016-3517 affects Oracle Agile PLM in Oracle Supply Chain Products Suite v9.3.4–v9.3.5. The vulnerability, in the PC / Get Shortcut subcomponent, allows a remote attacker to affect data integrity. CVSSv3 base score 4.3 (Network, Low complexity, No privileges, User interaction required; Integr...

Debian: Security Advisory (DSA-3517-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201301-03

Gentoo Linux Local Security Checks GLSA 201301-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2014-3517

api/metadata/handler.py in OpenStack Compute Nova before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in...

CVE-2014-3517

OpenStack Nova metadata proxy (api/metadata/handler.py) is affected when proxying metadata requests through Neutron. The vulnerability allows timing-based brute-forcing to guess instance ID signatures. Affected ranges include OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and J...

openSUSE Security Update : tor (openSUSE-SU-2012:1068-1)

Tor 0.2.2.38 fixes a rare race condition that can crash exit relays; fixes a remotely triggerable crash bug; and fixes a timing attack that could in theory leak path information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Fedora Update for tor FEDORA-2012-14650

Check for the Version of tor OpenVAS Vulnerability Test Fedora Update for tor FEDORA-2012-14650 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora 18 : tor-0.2.2.39-1800.fc18 (2012-14638)

. . . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2012-3517

Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service daemon crash via vectors related to failed DNS requests...

CVE-2012-3517

CVE-2012-3517 affects Tor before 0.2.2.38; the issue is a use‑after‑free in dns.c that can cause a daemon crash (DoS) via failed DNS requests. Remediation is upgrade to 0.2.2.38 or newer (e.g., 0.2.2.39 in some distributions). Public advisories and OpenVAS/NASL entries reference this CVE alongsid...

CVE-2011-3517

CVE-2011-3517 pertains to the Oracle OpenSSO component in Oracle Sun Products Suite 8.0, with an unspecified vulnerability that could affect availability via authentication. Connected documents reference OpenSSO and list the CVE in Red Hat’s RHSA-2012:1125-CVE-2011-3517, noting fixes within the 5...