CVE-2018-5732

Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server or an entity masquerading as a server to cause a buffer overflow and resulting crash in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions...

Design/Logic Flaw

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond...

CVE-2018-5733

A malicious client which is allowed to send very large amounts of traffic billions of packets to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 - 4.1-ESV-R15, 4.2.0 - 4.2.8, 4.3.0 - 4.3.6, 4.4.0...

Design/Logic Flaw

A malicious client which is allowed to send very large amounts of traffic billions of packets to a DHCP server can eventually overflow a 32-bit reference counter, potentially causing dhcpd to crash. Affects ISC DHCP 4.1.0 - 4.1-ESV-R15, 4.2.0 - 4.2.8, 4.3.0 - 4.3.6, 4.4.0...

[SECURITY] Fedora 27 Update: dhcp-4.3.6-10.fc27

DHCP Dynamic Host Configuration Protocol...

rzgc.be XSS vulnerability

Open Bug Bounty ID: OBB-568481 Description| Value ---|--- Affected Website:| rzgc.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| WordPress 4.3.6 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Captcha Plugin < 4.4.5 Backdoor Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112155";...

Linux kernel 'xt_alloc_table_info()' denial-of-service vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 4.4.5 and 4.3.6 that originates from an integer overflow error in the 'xtalloctableinfo' function in the...

Security fix for the ALT Linux 8 package samba-DC version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

Security fix for the ALT Linux 10 package samba version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

Security fix for the ALT Linux 7 package samba-DC version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group...

Security fix for the ALT Linux 8 package samba version 4.3.6-alt1

March 9, 2016 Andrey Cherepanov 4.3.6-alt1 - New version https://www.samba.org/samba/history/samba-4.3.6.html - Security fixes: - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path - CVE-2016-0771 Out-of-bounds read in internal DNS server - Do not use specified GID for wbpriv group ALT...

Fedora 22 : kernel-4.3.6-201.fc22 (2016-e7162262b0)

Update to the latest upstream stable release, Linux v4.3.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

CubeCart 3.0.4/4.3.6 'productId' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37065/info CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow

AnvSoft Any Video Converter 4.3.6 - Unicode Buffer Overflow Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 References: http://www.exploit-db.com/exploits/18717/...

AnvSoft Any Video Converter 4.3.6 Buffer Overflow

Title: ====== AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=492 VL-ID: ===== 492 Introduction: ============= An all-in-one user-friendly DVD ripper, Video Record, video...

Fedora 11 : imp-4.3.6-1.fc11 (2010-5508)

Update to 4.3.6, fixing security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Horde IMP <= 4.3.6 Information Disclosure Vulnerability

Horde IMP is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CubeCart 'productId' SQL Injection Vulnerability

CubeCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Cross site scripting

Cross-site scripting XSS vulnerability in themes/unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile...