Fedora Update for gpgme FEDORA-2014-16451

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : gpgme-1.3.2-5.fc20 (2014-16459)

Security fix for CVE-2014-3564 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Update for gpgme FEDORA-2014-16459

Check the version of gpgme SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868633";...

Fedora 21 : gpgme-1.4.3-5.fc21 (2014-16451)

Security fix for CVE-2014-3564 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

CVE-2014-3564

CVE-2014-3564 affects the GPGME library (status_handler) in engine-gpgsm.c and engine-uiserver.c, with multiple heap-based buffer overflows that allow remote denial of service and possibly arbitrary code execution via vectors related to different line lengths in a specific order. Affected: GPGME ...

CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

Mandriva Linux Security Advisory : gpgme (MDVSA-2014:160)

Updated gpgme packages fix security vulnerability : A heap-based buffer overflow in gpgme before 1.5.1 could allow a specially crafted certificate to cause crashes or potentially cause arbitrary code execution CVE-2014-3564. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

SuSE 11.3 Security Update : gpgme (SAT Patch Number 9644)

This gpgme update fixes the following security issue : - Fix possible overflow in gpgsm and uiserver engines CVE-2014-3564. bnc890123 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

MGASA-2014-0340 Updated gpgme packages fix CVE-2014-3564

Updated gpgme packages fix security vulnerability: A heap-based buffer overflow in gpgme before 1.5.1 could allow a specially crafted certificate to cause crashes or potentially cause arbitrary code execution CVE-2014-3564...

Updated gpgme packages fix CVE-2014-3564

Updated gpgme packages fix security vulnerability: A heap-based buffer overflow in gpgme before 1.5.1 could allow a specially crafted certificate to cause crashes or potentially cause arbitrary code execution CVE-2014-3564...

openSUSE Security Update : gpgme (openSUSE-SU-2014:1039-1)

This gpgme update to version 1.4.4 fixes the following security and non i security issues : - Fixed possible overflow in gpgsm and uiserver engines. CVE-2014-3564, bnc890123 - Fixed possibled segv in gpgmeopcardedit. - Fixed minor memleaks and possible zombie processes. - Fixed prototype...

[DLA 39-1] gpgme1.0 security update

Package : gpgme1.0 Version : 1.2.0-1.2+deb6u1 CVE ID : CVE-2014-3564 Debian Bug : 756651 Tomas Trnka discovered a heap-based buffer overflow within the gpgsm status handler of GPGME, a library designed to make access to GnuPG easier for applications. An attacker could use this issue to cause an...

[SECURITY] [DSA 3005-1] gpgme1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3005-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 14, 2014 http://www.debian.org/security/faq -...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)

Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...

Opera Multiple Denial of Service Vulnerabilities - June12 (Mac OS X)

The host is installed with Opera and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultdosvulnjune12macosx.nasl 5912 2017-04-10 09:01:51Z teissa $ Opera Multiple Denial of Service Vulnerabilities - June12 Mac OS X Authors: Sooraj KS Copyright:...

CVE-2012-3564

CVE-2012-3564 describes a denial-of-service condition in Opera prior to 12.00 Beta caused by a crafted absolutely positioned wrap=off TEXTAREA element placed next to an overflow: auto block. The vulnerability affects the rendering/input handling of a TEXTAREA and can cause the application to hang...

Oracle GlassFish Server Multiple Unspecified Vulnerabilities

The host is running GlassFish Server and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gboracleglassfishservermultunspecifiedvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ Oracle GlassFish Server Multiple Unspecified Vulnerabilities Authors: Antu Sanadi Copyright...

CVE-2011-3564

Oracle GlassFish Server 2.1.1 is affected by an unspecified vulnerability in the Administration component that allows local users to affect confidentiality. The issue is documented across multiple feeds (e.g., GlassFish NASL entry CVE-2011-3564) with an explicit remediation: upgrade to GlassFish ...