CVE-2016-3711

CVE-2016-3711 affects haproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin 3.2. The flaw allows local users to obtain the internal IP address of a pod by reading the OPENSHIFT_[namespace]_SERVERID cookie, an information-disclosure root cause in the HAProxy setup used by OpenShift. Imp...

Important: Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement update

Red Hat OpenShift Enterprise 3.2 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Oracle: Security Advisory (ELSA-2010-0890)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3711

CVE-2015-3711 affects Apple OS X NTFS memory-layout disclosure. The vulnerability arises from the NTFS implementation and can expose kernel memory layout via a crafted app. Affected OS X versions before 10.10.4 are implicated; remediation is to upgrade to OS X 10.10.4 (Security Update 2015‑005), ...

CVE-2015-3711

The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

Debian DSA-3070-1 : kfreebsd-9 - security update

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or information disclosure. - CVE-2014-3711 Denial of service through memory leak in sandboxed namei lookups. - CVE-2014-3952 Kernel memory disclosure in sockbuf control messages. - CVE-2014-395...

CVE-2014-3711

namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service memory exhaustion via vectors that trigger a sandboxed process to look up a large number of nonexistent path names...

CVE-2014-3711

namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service memory exhaustion via vectors that trigger a sandboxed process to look up a large number of nonexistent path names...

CVE-2014-3711

CVE-2014-3711 affects FreeBSD kernel versions 9.1 through 10.1-RC2. The flaw enables a remote attacker to trigger a sandboxed process to perform a large number of nonexistent path lookups in namei, causing memory exhaustion and a denial of service. The connected documents confirm the affected com...

FreeBSD Security Advisory FreeBSD-SA-14:22.namei

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-14:22.namei Security Advisory The FreeBSD Project Topic: memory leak in sandboxed namei lookup Category: core Module: kernel Announced: 2014-10-21 Credits: Mateus...

Oracle Linux 6 : pidgin (ELSA-2010-0890)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0890 advisory. 2.6.6-6.el6 - Add patch for CVE-2010-3711 RH bug 645413. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 4 : pidgin (ELSA-2010-0788)

From Red Hat Security Advisory 2010:0788 : Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

CVE-2012-3711

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

CVE-2012-3711

CVE-2012-3711: WebKit as used in Apple iTunes before 10.7 is affected. The vulnerability is in WebKit’s handling of crafted web content, potentially causing memory corruption that can lead to arbitrary code execution or application crash (DoS). The provided documents name the affected component (...

Scientific Linux Security Update : pidgin on SL6.x i386/x86_64

Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging and Presence Protocol XMPP protocol...

Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64

Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging and Presence Protocol XMPP protocol...

SuSE 11.1 Security Update : pidgin, libpurple and finch (SAT Patch Number 5389)

This update fixes the following security issues : - 604225: MSN emoticon DoS. CVE-2010-1624 - 648273: multiple NULL pointer dereference weaknesses. CVE-2010-3711 - 722199: vulnerability in SILC protocol handling CVE-2011-3594 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

CVE-2011-3711

The CVE-2011-3711 entry describes a vulnerability in BIGACE 2.7.5 that allows remote information disclosure by requesting a PHP file directly, causing an error message that reveals the installation path (e.g., system/libs/javascript.inc.php and related files). The connected records corroborate an...

CentOS Update for finch CESA-2010:0788 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2010:0788 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for pidgin FEDORA-2011-8917

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...