137 matches found
CVE-2014-4344
The accctxcont function in the SPNEGO acceptor in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty continuation token at a certain point...
CVE-2014-4344
The MIT Kerberos SPNEGO acceptor (lib/gssapi/spnego/spnego_mech.c, krb5 1.5.x–1.12.x before 1.12.2) is affected by CVE-2014-4344 due to a NULL pointer dereference when processing an empty continuation token during SPNEGO negotiation, enabling remote, unauthenticated denial of service (server cras...
Debian DSA-3000-1 : krb5 - security update
Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-4341 An unauthenticated remote attacker with the ability to inject packets into a legitimately established GSSAPI...
[SECURITY] [DSA 3000-1] krb5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3000-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3000-1] krb5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3000-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3000-1 (krb5 - security update)
Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-4341 An unauthenticated remote attacker with the ability to inject packets into a legitimately established GSSAPI...
DSA-3000-1 krb5 - security update
Bulletin has no description...
Fedora Update for krb5 FEDORA-2014-8189
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-3000-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : krb5-1.11.5-10.fc20 (2014-8189)
This update incorporates backported upstream fixes for potential crashes caused by attempts to process malformed GSSAPI messages CVE-2014-4341, CVE-2014-4342. It also incorporates fexes for a possible double-free CVE-2014-4343 and a possible NULL pointer dereference CVE-2014-4344 in GSSAPI client...
CVE-2014-4344
The accctxcont function in the SPNEGO acceptor in lib/gssapi/spnego/spnegomech.c in MIT Kerberos 5 aka krb5 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty continuation token at a certain point...
openSUSE Security Update : exim (openSUSE-SU-2010:1052-1)
remote attackers could trick exim into running arbitrary code CVE-2010-4344. A privilege escalation flaw allowed attackers to gain root access CVE-2010-4345. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
[SECURITY] [DSA 2932-1] qemu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2932-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 19, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2932-1] qemu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2932-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 19, 2014 http://www.debian.org/security/faq -...
SuSE 11.3 Security Update : kvm (SAT Patch Number 9142)
The QEMU embedded within KVM received various security fixes. Various issues in the block layer have been fixed : - A virtio security issue in config io space handling. CVE-2013-2016 - A SCSI report LUNs buffer overflow. CVE-2013-4344 - A buffer overflow in the QEMU USB stack. CVE-2013-4541...
Ubuntu: Security Advisory (USN-2092-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2092-1: QEMU vulnerabilities
Asias He discovered that QEMU incorrectly handled SCSI controllers with more than 256 attached devices. A local user could possibly use this flaw to elevate privileges. CVE-2013-4344 It was discovered that QEMU incorrectly handled Xen disks. A local guest could possibly use this flaw to consume...
Oracle Linux 6 : qemu-kvm (ELSA-2013-1553)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1553 advisory. - Resolves: bz1007330 CVE-2013-4344 qemu: buffer overflow in scsitargetemulatereportluns Tenable has extracted the preceding description block directly from the...
qemu security update
CentOS Errata and Security Advisory CESA-2013:1553 Updated qemu-kvm packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A...
Updated qemu package fixes security vulnerability
A buffer overflow flaw was found in the way QEMU processed the SCSI "REPORT LUNS" command when more than 256 LUNs were specified for a single SCSI target. A privileged guest user could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code...