Moderate: yum security, bug fix, and enhancement update

Yum is a command-line utility that allows the user to check for updates and automatically download and install updated RPM packages. Yum automatically obtains and downloads dependencies, prompting the user for permission as necessary. The following packages have been upgraded to a later upstream...

CVE-2019-3817

CVE-2019-3817 affects libcomps: a use-after-free in merging ObjMRTrees when reading crafted comps XML can crash the application or allow code execution. Affected: libcomps versions prior to 0.1.10. Public details come from multiple advisories (RHSA-2019:3898, RHSA-2019:3583, CESA entries) and Ope...

CVE-2019-3817

A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code...

OPENSUSE-SU-2019:0328-1 Security update for libcomps

This update for libcomps fixes the following issue: Security issue fixed: - CVE-2019-3817: Fixed a use-after-free vulnerability in compsobjmradix.c:compsobjmrtreeunite function where could allow to application crash or code execution bsc1122841. This update was imported from the...

Security update for libcomps (moderate)

openSUSE Security Update: Security update for libcomps Announcement ID: openSUSE-SU-2019:0328-1 Rating: moderate References: 1122841 Cross-References: CVE-2019-3817 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for...

Security update for libcomps (moderate)

openSUSE Security Update: Security update for libcomps Announcement ID: openSUSE-SU-2019:0323-1 Rating: moderate References: 1122841 Cross-References: CVE-2019-3817 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libcomps...

Logstash ESA-2018-01

When logging warnings regarding deprecated settings, Logstash could inadvertently log sensitive information. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid121312; scriptversion"1.2"; scriptcvsdate"Date: 2019/10/31 15:18:51"; scriptcveid"CVE-2018-3817";...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Python vulnerabilities (USN-3817-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3817-1 advisory. It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this issue to cause Python t...

Ubuntu: Security Advisory (USN-3817-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2018:2536-1 Security update for grafana, kafka, logstash and monasca-installer

This update for grafana, kafka, logstash and monasca-installer fixes the following issues: The following security issues have been fixed: grafana: - CVE-2018-12099: Fix Cross-Site-Scripting XSS vulnerabilities in dashboard links. bsc1096985 kafka: - CVE-2018-1288: Authenticated Kafka users may...

CVE-2018-3817

When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information...

CVE-2018-3817

CVE-2018-3817 : Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information when emitting warnings about deprecated settings. Impact : information disclosure if deprecated settings are logged. Affected versions : Logstash <5.6.6 and

Elastic Logstash 'CVE-2018-3817' Information Disclosure Vulnerability

Elastic Logstash is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

unwire.hk XSS vulnerability

Vulnerable URL: https://unwire.hk/?s=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3817 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bu...

CVE-2013-3817

This CVE entry is rejected/not used per the Initial Description; the candidate number was not associated with any vulnerability.

CVE-2013-3817

...

CVE-2016-3817

CVE-2016-3817 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-3817

...

CVE-2017-3817

CVE-2017-3817 affects Cisco UCS Director. The issue is an information-disclosure vulnerability due to improper role-based access checks in the RBAC for VM information; an authenticated remote attacker could view unauthorized VM data in a UCS domain. Affected releases include 5.5(0.1) and 6.0(0.0)...

Debian DSA-3817-1 : jbig2dec - security update

Multiple security issues have been found in the JBIG2 decoder library, which may lead to lead to denial of service or the execution of arbitrary code if a malformed image file usually embedded in a PDF document is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...