CVE-2012-3807

Samsung Kies before 2.5.0.12094_27_11 is affected by CVE-2012-3807 (and related CVEs) with arbitrary file execution via vulnerable components (notably ActiveX controls and related DLLs). Public sources indicate multiple vulnerabilities in Samsung Kies ActiveX/DCAPARAGONGM.dll and CmdAgent.dll, en...

CVE-2012-3807

Samsung Kies before 2.5.0.120942711 has arbitrary file execution...

OPENSUSE-SU-2019:0100-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: - CVE-2019-3807: Fixed insufficient validation of DNSSEC signatures boo1121889...

Fedora 28 : pdns-recursor (2019-7696bb57ca)

Fixes CVE-2019-386 and CVE-2019-3807 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Fedora 29 : pdns-recursor (2019-f44f095639)

Fixes CVE-2019-386 and CVE-2019-3807 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

openSUSE Security Update : pdns-recursor (openSUSE-2019-100)

This update for pdns-recursor fixes the following issues : - CVE-2019-3807: Fixed insufficient validation of DNSSEC signatures boo1121889 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE: Security Advisory for pdns-recursor (openSUSE-SU-2019:0100-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-3807

An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation...

CVE-2019-3807

PowerDNS Recursor (4.1.x before 4.1.9) has a DNSSEC validation bypass in responses where AA=0; records in the answer section from authoritative servers were not properly validated. Public reports reference PowerDNS Recursor 4.1.9+ fixes, with Fedora/OpenSUSE advisories noting fixes in 2019 (and l...

Updated pdns-recursor package fixes security vulnerabilities

An issue has been found in PowerDNS Recursor where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua CVE-2019-3806. An issue has been found in PowerDNS Recursor where records in the...

Ubuntu 16.04 LTS / 18.04 LTS : NetworkManager vulnerability (USN-3807-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3807-1 advisory. Felix Wilhelm discovered that the NetworkManager internal DHCPv6 client incorrectly handled certain DHCPv6 messages. In non-default configurations whe...

Ubuntu: Security Advisory (USN-3807-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3807-1 : icoutils - security update

Multiple vulnerabilities were discovered in the icotool and wrestool tools of Icoutils, a set of programs that deal with MS Windows icons and cursors, which may result in denial of service or the execution of arbitrary code if a malformed .ico or .exe file is processed. %NASLMINLEVEL 70300 C...

CVE-2017-3807

creationtimestamp| type| source ---|---|--- 2017-02-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41369...

CVE-2017-3807

CVE-2017-3807 is a heap overflow vulnerability in Cisco ASA Software’s Clientless SSL VPN CIFS code, affecting ASA 5500 Series, 5500-X Series, ASAv, and related platforms (releases 9.0–9.6). The root cause is insufficient validation of user-supplied input, exploitable via a crafted URL over IPv4/...

CVE-2016-3807

The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 28402196...

CVE-2016-3807

CVE-2016-3807 describes a privilege-escalation flaw in the serial peripheral interface (SPI) driver on Android devices: specifically affecting Nexus 5X and Nexus 6P, where a crafted application could gain elevated privileges due to a bug in the SPI driver. The issue is categorized as a local elev...

CVE-2015-3807

libxml2 in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted XML document...

CVE-2015-3807

Mode C: CVE-2015-3807 affects libxml2 in Apple iOS <= 8.4.1 and OS X

CVE-2014-3807

CVE-2014-3807 concerns BarracudaDrive 6.7.2, where multiple cross-site scripting (XSS) vulnerabilities exist in the web interface. The underlying issue allows remote attackers to inject arbitrary web script or HTML through the private/manage/ page by supplying one of three parameters: blog, blogg...