CVE-2016-3732

The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users...

CVE-2016-3732

CVE-2016-3732 affects Moodle; impact is that remote authenticated users can read badges of other users due to a capability check flaw. Affected versions include Moodle 3.0 up to 3.0.3, 2.9 up to 2.9.5, 2.8 up to 2.8.11, and 2.7 up to 2.7.13, and earlier. The connected documents confirm the existe...

MySQL 5.6.x < 5.6.36 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU) (Riddle)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.36. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...

openSUSE Security Update : openssl (openSUSE-2017-256)

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed : - CVE-2016-7055: The x8664 optimized montgomery multiplication may produce incorrect results bsc1009528 - CVE-2017-3731: Truncated packet could crash via OO...

F5 Networks BIG-IP : OpenSSL vulnerability (K44512851)

There is a carry propagating bug in the x8664 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed...

Fedora 24 : 1:openssl (2017-e853b4144f)

Minor upstream release fixing CVE-2016-8610, CVE-2017-3731, CVE-2017-3732. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

SUSE-SU-2017:0441-1 Security update for openssl

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory 26 Jan 2017 bsc1021641 Security issues fixed: - CVE-2016-7055: The x8664 optimized montgomery multiplication may produce incorrect results bsc1009528 - CVE-2017-3731: Truncated packet could crash via OOB...

Fedora 25 : 1:openssl (2017-3451dbec48)

Minor upstream release fixing CVE-2016-8610, CVE-2017-3731, CVE-2017-3732. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

OpenSSL 1.1.0 < 1.1.0d Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.0d. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.0d advisory. - There is a carry propagating bug in the x8664 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2k-alt0.M80P.1

1.0.2k-alt0.M80P.1 built Jan. 27, 2017 Gleb Fotengauer-Malinovskiy in task 177185 Jan. 26, 2017 Gleb Fotengauer-Malinovskiy - Backported to p8 branch fixes CVE-2016-7055, CVE-2017-3731, CVE-2017-3732...

OpenSSL update, 1.0.2k

OpenSSL update, 1.0.2k Update 1-February-2017 Releases available Updates are now available for all active Node.js release lines. The following releases are bundled with OpenSSL 1.0.2k: Node.js 7.5.0 Current Node.js 6.9.5 LTS "Boron" Node.js 4.7.3 LTS "Argon" While this is not a critical update, a...

FreeBSD : OpenSSL -- multiple vulnerabilities (d455708a-e3d3-11e6-9940-b499baebfeaf)

The OpenSSL project reports : - Truncated packet could crash via OOB read CVE-2017-3731 - Bad ECDHE parameters cause a client crash CVE-2017-3730 - BNmodexp may produce incorrect results on x8664 CVE-2017-3732 - Montgomery multiplication may produce incorrect results CVE-2016-7055 %NASLMINLEVEL...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2k-alt1

Jan. 26, 2017 Gleb Fotengauer-Malinovskiy 1.0.2k-alt1 - Updated to v1.0.2k fixes CVE-2016-7055, CVE-2017-3731, CVE-2017-3732...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2k-alt1

Jan. 26, 2017 Gleb Fotengauer-Malinovskiy 1.0.2k-alt1 - Updated to v1.0.2k fixes CVE-2016-7055, CVE-2017-3731, CVE-2017-3732...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2k-alt1

Jan. 26, 2017 Gleb Fotengauer-Malinovskiy 1.0.2k-alt1 - Updated to v1.0.2k fixes CVE-2016-7055, CVE-2017-3731, CVE-2017-3732...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2k-alt1

Jan. 26, 2017 Gleb Fotengauer-Malinovskiy 1.0.2k-alt1 - Updated to v1.0.2k fixes CVE-2016-7055, CVE-2017-3731, CVE-2017-3732...

[SECURITY] [DSA 3732-2] php-ssh2 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3732-2 [email protected] https://www.debian.org/security/ Sebastien Delafond December 21, 2016 https://www.debian.org/security/faq -...

Debian DSA-3732-1 : php5 - security update

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The vulnerabilities are addressed by upgrading PHP to the new upstream version 5.6.28, which includes additional bug fixes. Please refer to the upstream changelog for mor...

FreeBSD : moodle -- multiple vulnerabilities (8656cf5f-4170-11e6-8dfe-002590263bf5)

Marina Glancy reports : - MSA-16-0013: Users are able to change profile fields that were locked by the administrator. - MSA-16-0015: Information disclosure of hidden forum names and sub-names. - MSA-16-0016: User can view badges of other users without proper permissions. - MSA-16-0017: Course...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...