Important: Red Hat Security Advisory: openjpeg security update

Updated openjpeg packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

openjpeg security update

1.3-9 - Apply patch for CVE-2012-3535 Resolves: CVE-2012-3535...

CVE-2012-3535

OpenJPEG up to version 1.5.0 is affected by a heap-based buffer overflow (CVE-2012-3535) that can crash the application or potentially allow code execution via a crafted JPEG 2000 file. Multiple advisories confirm the issue and track fixes in newer OpenJPEG releases (e.g., OpenJPEG 1.5.1 and rela...

CVE-2011-3535

CVE-2011-3535 concerns an unspecified vulnerability in the Solaris component of Oracle Sun Products Suite (versions 8–11 Express) that could affect availability via the Remote Quota Server (rquotad). The linked documents confirm Solaris patches related to this family of issues (e.g., 121194-02 fo...

Solaris 9 (sparc) : 121194-02

SunOS 5.9: usr/lib/nfs/statd Patch. Date this patch was last updated by Sun : Sep/01/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2010-3535

CVE-2010-3535 affects the Directory Server Enterprise Edition component of Oracle Sun Product Suite (versions 6.0–6.3). The vulnerability is described as unspecified and exploitable via Identity Synchronization for Windows, with potential impact to confidentiality, integrity, and availability. Th...

CVE-2009-3535

Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect...

CVE-2009-3535

CVE-2009-3535 affects Clear Content 1.1, specifically the image.php component. The vulnerability is a directory traversal issue that allows a remote attacker to read arbitrary files by supplying a ... in the URL parameter. The linked connected records do not provide concrete details beyond this d...

USN-659-1: Linux kernel vulnerabilities

It was discovered that the direct-IO subsystem did not correctly validate certain structures. A local attacker could exploit this to cause a system crash, leading to a denial of service. CVE-2007-6716 It was discovered that the disabling of the ZEROPAGE optimization could lead to large memory...

Gentoo Security Advisory GLSA 200607-05 (shoutcast)

The remote host is missing updates announced in advisory GLSA 200607-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-05 (shoutcast)

The remote host is missing updates announced in advisory GLSA 200607-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1636-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1636-1] New Linux 2.6.24 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1636-1 [email protected] http://www.debian.org/security/ dann frazier Sep 11, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1636-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1636-1 [email protected] http://www.debian.org/security/ dann frazier Sep 11, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1636-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

CVE-2008-3535

Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...

CVE-2008-3535

CVE-2008-3535 is an off-by-one error in the iov_iter_advance function of Linux kernel mm/filemap.c, addressed by multiple advisories. Public disclosures in Debian/Ubuntu indicate this allows local attackers to crash the system (denial of service) via certain sequences of readv/writev/file operati...

CVE-2007-3535

creationtimestamp| type| source ---|---|--- 2008-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5870...

Debian Security Advisory DSA 926-2 (ketm)

The remote host is missing an update to ketm announced via advisory DSA 926-2. Steve Kemp from the Debian Security Audit Project discovered a buffer overflow in ketm, an old school 2D-scrolling shooter game, that can be exploited to execute arbitrary code with group games privileges. For the old...

CVE-2006-3535

CVE-2006-3535 is described as a directory traversal in Nullsoft SHOUTcast DSP before 1.9.7 that allows remote reading of arbitrary files via vectors similar to CVE-2006-3534. The connected documents do not provide further technical details (affected components, root cause, exact vectors, or remed...