Debian DSA-3913-1 : apache2 - security update

Robert Swiecki reported that modauthdigest does not properly initialize or reset the value placeholder in Proxy-Authorization headers of type 'Digest' between successive key=value assignments, leading to information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2015-3913

CVE-2015-3913 affects Huawei Campus series switch IP stacks. According to Huawei’s advisory HWPSIRT-2015-02003, the vulnerability arises from improper handling of IP options in the IP stack when processing crafted ICMP requests, which can cause a board reboot (denial of service). Other connected ...

CVE-2013-3913

...

CVE-2013-3913

CVE-2013-3913 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-3913

media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not validate a certain staticcast operation, which allows attackers to gain privileges via a crafted...

CVE-2016-3913

CVE-2016-3913 affects media/libmediaplayerservice/MediaPlayerService.cpp in Mediaserver on Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, 6.x up to 2016-10-01, and 7.0 up to 2016-10-01. The root cause is that a certain static_cast is not validated, enabling privilege escalation vi...

Security Advisory - IP Option Improper Handling Vulnerability in Multiple Huawei Products

Multiple Huawei Products have an improper IP option handling vulnerability. The IP stack implementation in multiple Huawei products mishandles IP options when a crafted ICMP request message is received, leading to the board reboot Vulnerability ID: HWPSIRT-2015-02003. This Vulnerability has been...

Ericom AccessNow Server Stack Buffer Overflow (CVE-2014-3913)

A stack buffer overflow vulnerability exists in Ericom AccessNow Server. The vulnerability is due to improper handling of specially crafted HTTP requests for non-existent files. A remote attacker can exploit this vulnerability by sending a crafted HTTP request...

Ericom AccessNow Server < 3.3.1.4095 Stack-Based Buffer Overflow

The remote web server has an Ericom AccessNow server product prior to version 3.3.1.4095. It is, therefore, affected by a stack-based buffer overflow vulnerability that can be triggered by requesting a non-existent file. Successful exploitation can result in remote code execution or a denial of...

CVE-2014-3913

creationtimestamp| type| source ---|---|--- 2014-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33817 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ericomaccessnowbof.rb 2025-02-06 03:13:41+00:00|...

openSUSE Security Update : dhcp (openSUSE-SU-2011:0098-1)

A Denial of Service vulnerability while processing DHCPv6 decline messages hass been fixed. CVE-2011-0413 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2014-3913

CVE-2014-3913 is a stack-based buffer overflow affecting Ericom AccessNow Server (and related AccessNow components) up to version 3.3.1.4095. The vulnerability arises from improper handling of requests for non-existent files, allowing remote execution of arbitrary code via crafted HTTP requests. ...

CVE-2014-3913

Stack-based buffer overflow in AccessServer32.exe in Ericom AccessNow Server allows remote attackers to execute arbitrary code via a request for a non-existent file...

KLA10149 ACE vulnerability in Ericom

A buffer overflow was found in Ericom products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request. Original advisories Ericom bulletin Exploitation Public exploits exist for this vulnerability...

Gentoo Security Advisory GLSA 201201-03 (chromium v8)

The remote host is missing updates announced in advisory GLSA 201201-03. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Google Chrome Multiple Vulnerabilities - December11 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11lin.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Linux Authors: Rachana Shetty Copyright: Copyright c 20...

Google Chrome Multiple Vulnerabilities - December11 (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11win.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Windows Authors: Rachana Shetty Copyright: Copyright c...

Google Chrome < 16.0.912.63 Multiple Vulnerabilities

Binary data 6108.pasl...

CVE-2011-3913

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling...

CVE-2011-3913

Technical details about CVE-2011-3913 are not publicly provided in the supplied connected documents. The entries reference it among others but do not describe affected product, version, exploit, or remediation.