DEBIAN-CVE-2014-3683

Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service crash via a large priority PRI value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634...

CVE-2014-3683

CVE-2014-3683 is an rsyslog-related integer overflow vulnerability: rsyslog before 7.6.7 and 8.x before 8.4.2 (and sysklogd 1.5 and earlier) can crash the daemon when processing a crafted high PRI value, enabling a remote DoS. The issue stems from an incomplete fix for CVE-2014-3634. Public advis...

DLA-72-2 rsyslog - regression update

Bulletin has no description...

DLA-72-1 rsyslog - security update

Bulletin has no description...

openSUSE Security Update : rsyslog (openSUSE-SU-2014:1298-1)

Fixed remote PRI DoS vulnerability patch CVE-2014-3683,bnc899756 rsyslog-7.2.7-remote-PRI-DoS-fix-backportCVE-2014-3634. patch - Removed broken, unsupported and dropped by upstream zpipe utility from rsyslog-diag-tools package bnc890228 - Remote syslog PRI DoS vulnerability fix...

openSUSE Security Update : rsyslog (openSUSE-SU-2014:1297-1)

Fixed PRI DoS vulnerability patch CVE-2014-3683,bnc899756 rsyslog-7.4.7-remote-PRI-DoS-fix-backportCVE-2014-3634. patch - Removed broken, unsupported and dropped by upstream zpipe utility from rsyslog-diag-tools package bnc890228 - Remote syslog PRI DoS vulnerability fix CVE-2014-3634,bnc897262 +...

SuSE 11.3 Security Update : rsyslog (SAT Patch Number 9840)

rsyslog has been updated to fix a remote denial of service issue : - Under certain configurations, a local or remote attacker able to send syslog messages to the server could have crashed the log server due to an array overread. CVE-2014-3634 / CVE-2014-3683 %NASLMINLEVEL 70300 C Tenable Network...

Security fix for the ALT Linux 7 package rsyslog version 7.6.7-alt0.M70P.1

7.6.7-alt0.M70P.1 built Oct. 13, 2014 Alexey Shabalin in task 131847 Oct. 9, 2014 Alexey Shabalin - 7.6.7 - fixed CVE-2014-3634, CVE-2014-3683...

Ubuntu 14.04 LTS : Rsyslog vulnerabilities (USN-2381-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2381-1 advisory. It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog server...

Ubuntu: Security Advisory (USN-2381-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3047-1] rsyslog security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3047-1 [email protected] http://www.debian.org/security/ Luciano Bello October 08, 2014 http://www.debian.org/security/faq -...

CVE-2014-3683

Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service crash via a large priority PRI value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3634...

freeFTPd 1.0 Username Overflow

No description provided by source. $Id: freeftpduser.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Oracle Linux 6 : mysql (ELSA-2011-0164)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0164 advisory. 5.1.52-1.1 - Update to MySQL 5.1.52, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html including numerous small...

Scientific Linux Security Update : mysql on SL6.x i386/x86_64

The MySQL PolyFromWKB function did not sanity check Well-Known Binary WKB data, which could allow a remote, authenticated attacker to crash mysqld. CVE-2010-3840 A flaw in the way MySQL processed certain JOIN queries could allow a remote, authenticated attacker to cause excessive CPU use up to...

CVE-2012-3683

CVE-2012-3683 affects WebKit as used by Apple Safari prior to version 6.0. The issue enables remote code execution or memory corruption leading to application crash when visiting a crafted website. The connected docs map this CVE to WebKit memory‑corruption bugs reported by iDefense/TEAM509, with...

Gentoo Security Advisory GLSA 201201-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 201201-02. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2010-3683

CVE-2010-3683 affects Oracle MySQL 5.1 prior to 5.1.49 and 5.5 prior to 5.5.5, where a LOAD DATA INFILE request with SQL errors can cause the server to send an OK packet, enabling remote authenticated users to trigger a mysqld denial of service. Connected advisories/NESSUS entries enumerate this ...

SuSE 11 / 11.1 Security Update : MySQL (SAT Patch Numbers 3220 / 3243)

The following bugs have been fixed : - local users could delete data files for tables of other users. CVE-2010-1626 - authenticated users could gather information for tables they should not have access to. CVE-2010-1849 - authenticated users could crash mysqld. CVE-2010-1848 - authenticated users...

[USN-1017-1] MySQL vulnerabilities

=========================================================== Ubuntu Security Notice USN-1017-1 November 11, 2010 mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities CVE-2010-2008, CVE-2010-3677, CVE-2010-3678, CVE-2010-3679, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682, CVE-2010-3683,...