Ubuntu: Security Advisory (USN-3837-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : poppler vulnerabilities (USN-3837-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3837-1 advisory. It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial...

Fedora Update for mingw-SDL2_image FEDORA-2018-e8d19367cb

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated SDL_image packages fix security vulnerability

Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 1.2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened CVE-2017-12122, CVE-2017-14440, CVE-2017-14441, CVE-2017-14442, CVE-2017-1444...

Debian DSA-4184-1 : sdl-image1.2 - security update

Multiple vulnerabilities have been discovered in the image loading library for Simple DirectMedia Layer 1.2, which could result in denial of service or the execution of arbitrary code if malformed image files are opened. C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 4184-1] sdl-image1.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4184-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4184-1] sdl-image1.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4184-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2018 https://www.debian.org/security/faq -...

CVE-2018-3837

CVE-2018-3837 describes an information-disclosure flaw in the PCX image handling of SDL2_image-2.0.2. A specially crafted PCX image can trigger an out-of-bounds read on the heap, allowing partial disclosure when the image is processed. The vulnerability affects SDL2_image’s PCX rendering path and...

Debian: Security Advisory (DSA-3837-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3837

CVE-2017-3837 affects Cisco Meeting Server (CMS), formerly Acano Conferencing Server. A vulnerability in the Web Bridge HTTP packet processing allows an authenticated, remote attacker with a valid Web Bridge session to retrieve memory contents, potentially leaking confidential data, and may cause...

CVE-2016-3837

service/jni/comandroidserverwifiWifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application that provides a MAC address with too few characters, aka internal bug 28164077...

CVE-2016-3837

CVE-2016-3837 affects the Wi‑Fi stack in Android, specifically service/jni/com_android_server_wifi_WifiNative.cpp, allowing information disclosure via a crafted app that provides a MAC address with too few characters. Impacted Android versions include 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6...

CVE-2015-3825

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-3837. Reason: This candidate is a reservation duplicate of CVE-2015-3837. Notes: All CVE users should reference CVE-2015-3837 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2015-3825

The CVE-2015-3825 entry concerns OpenSSLX509Certificate in Android (org/conscrypt/OpenSSLX509Certificate.java) prior to 5.1.1. The vulnerability arises because the mContext pointer (a serialized field) is deserialized and later finalized by the GC, triggering OpenSSL/ASN1 cleanup paths. During fi...

aol.co.uk XSS vulnerability

Vulnerable URL: http://www.aol.co.uk/lifestyle/food/search/?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3Echannel=recipesit=aoluk-recipes-top Details: Description| Value ---|--- Patched:| Yes, at 18.01.2016 Latest check for patch:| 18.01.2016 02:37 GMT Vulnerability type:| XSS...

Oracle: Security Advisory (ELSA-2010-0825)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3837

The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka...

CVE-2015-3837

CVE-2015-3837 affects Android’s OpenSSLX509Certificate class (org/conscrypt/OpenSSLX509Certificate.java) in builds prior to 5.1.1 LMY48I. The root cause is improper inclusion of certain context data during serialization and deserialization, enabling a malicious local application to trigger code e...

Oracle Solaris Critical Patch Update : oct2013_SRU11_1_12_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Cacao. Supported versions that are affected are 10 and 11.1. Difficult to exploit vulnerability allows successful...

openSUSE Security Update : libmariadbclient16 (openSUSE-SU-2011:0743-1)

MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmariadbclient16-4830. The text description of this plugin is ...