Debian DSA-4356-1 : netatalk - security update

Jacob Baines discovered a flaw in the handling of the DSI Opensession command in Netatalk, an implementation of the AppleTalk Protocol Suite, allowing an unauthenticated user to execute arbitrary code with root privileges. C Tenable Network Security, Inc. The descriptive text and package checks i...

CVE-2017-4356

CVE-2017-4356 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4356

The appendutf8value function in the DN decoder dn.c in Libksba before 1.3.3 allows remote attackers to cause a denial of service out-of-bounds read by clearing the high bit of the byte after invalid utf-8 encoded data...

CVE-2016-4356

CVE-2016-4356 affects Libksba’s DN decoder (dn.c) with the append_utf8_value function: older releases before 1.3.3 may incur an out-of-bounds read when the high bit of a byte after invalid UTF-8 data is cleared, enabling denial of service. Several connected advisories/plugins reference this issue...

Fedora Update for libksba FEDORA-2016-fd26f713e7

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: libksba

Issue Overview: The following security-related issues were resolved: Incomplete fix for CVE-2016-4356 CVE-2016-4574 Out-of-bounds read in ksbaberparsetl CVE-2016-4579 Affected Packages: libksba Issue Correction: Run yum update libksba or yum update --advisory ALAS-2016-712 to update your system...

openSUSE Security Update : libksba (openSUSE-2016-624)

This update for libksba fixes the following issues : Security issue fixed : - boo979261: OOB read access bugs remote DoS - CVE-2016-4574: off-by-one OOB read access incomplete fix for CVE-2016-4356 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Updated libksba packages fix security vulnerabilities

Updated libksba packages fix security vulnerabilities: An out-of-bounds read access in ksbadntostr in libksba 1.3.3, due to an incomplete fix for CVE-2016-4356, could result in denial of service CVE-2016-4574. In liksba 1.3.3, the returned length of the object from ksbaberparsetl ti.length was no...

Ubuntu 14.04 LTS / 16.04 LTS : Libksba vulnerabilities (USN-2982-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2982-1 advisory. Hanno Bck discovered that Libksba incorrectly handled decoding certain BER data. An attacker could use this issue to cause Libksba to crash,...

libksba: denial of service

An out-of-bound read access due to incorrect utf-8 strings handling has been in found in the ksbadntostr function. This issue is due to an incomplete fix for CVE-2016-4356, caused by an off-by-one error when handling incorrect utf-8 strings...

Gentoo Security Advisory GLSA 201407-03

Gentoo Linux Local Security Checks GLSA 201407-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-4356

Cross-site scripting XSS vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a webform...

CVE-2015-4356

CVE-2015-4356 affects the Drupal Webform module (7.x-4.x) before 7.x-4.4. The vulnerability is an XSS in the view-based webform results table, exploitable by remote authenticated users with certain permissions to inject arbitrary script/HTML via a webform. The root cause is insufficient escaping ...

CVE-2014-4356

CVE-2014-4356 affects Apple iOS prior to 8.0. The vulnerability is in the Settings/Lock Screen text-message previews: previews could be shown on the lock screen despite the setting, allowing physically proximate attackers to read message contents. Root cause: the system did not observe the config...

Fedora 20 : xen-4.3.0-7.fc20 (2013-18300)

Three security fixes CVE-2013-4355 CVE-2013-4356 CVE-2013-4361, Set 'Domain-0' label in xenstored.service systemd file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

CVE-2013-4356

CVE-2013-4356 affects Xen 4.3.x when performing live migration on hosts with more than 5 TB RAM. The vulnerability allows local 64‑bit PV guests to read/write to invalid memory, causing a Denial of Service (crash). Public documents indicate remediation through vendor package updates to newer Xen ...

CVE-2012-4356

CVE-2012-4356 describes multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA (pre-2.07.17) and Winlog Lite SCADA (pre-2.07.17) . The flaw allows a remote attacker to read arbitrary files by sending crafted TCP packets to port 46824, issuing a file-open operation (opcode...

Sielco Sistemi Winlog Remote File Access

This module exploits a directory traversal in Sielco Sistemi Winlog. The vulnerability exists in the Runtime.exe service and can be triggered by sending a specially crafted packet to the 46824/TCP port. This module has been successfully tested on Sielco Sistemi Winlog Lite 2.07.14. This module...

Fedora Update for python-celery FEDORA-2011-16549

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4356

Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryddetach, celeryd-multi, and celeryev, which allows local users to gain privileges via vectors involving...