73 matches found
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : snapd vulnerabilities (USN-4424-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4424-1 advisory. It was discovered that cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices ran on every boot without...
GE ST-4424 RSTi Slice 4 Channels Detection
Binary data 755615.prm...
CVE-2018-4424
CVE-2018-4424 is described as a buffer overflow that was addressed with improved size validation, affecting macOS Mojave up to 10.14.0 (prior to 10.14.1). The Red Hat/EUVD/NVD references corroborate the issue; Apple’s entry indicates the vulnerability resides in components updated in macOS Mojave...
CVE-2017-4424
CVE-2017-4424 is rejected and not used; this entry does not represent an active vulnerability.
Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3
6:2.11.3-alt8.M60P.3 built Dec. 23, 2015 Dmitry V. Levin in task 155253 Dec. 23, 2015 Dmitry V. Levin - Backported upstream fixes for sw15330/CVE-2013-1914, sw14699/CVE-2013-4237, sw1585567/CVE-2013-4332, sw14134/CVE-2012-6656, sw17325/CVE-2014-6040, sw14547/CVE-2012-4412,4424...
Debian DLA-350-1 : eglibc security update
The strxfrm function is vulnerable to integer overflows when computing memory allocation sizes similar to CVE-2012-4412. Furthermore since it fallbacks to use alloca when malloc fails, it is vulnerable to stack-based buffer overflows similar to CVE-2012-4424. Those issues have been fixed in Debia...
[SECURITY] [DLA 165-1] eglibc security update
Package : eglibc Version : 2.11.3-4+deb6u5 CVE ID : CVE-2012-3405 CVE-2012-3406 CVE-2012-3480 CVE-2012-4412 CVE-2012-4424 CVE-2013-0242 CVE-2013-1914 CVE-2013-4237 CVE-2013-4332 CVE-2013-4357 CVE-2013-4458 CVE-2013-4788 CVE-2013-7423 CVE-2013-7424 CVE-2014-4043 CVE-2015-1472 CVE-2015-1473 Debian...
Fedora Update for glibc FEDORA-2014-9830
Check the version of glibc SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868418";...
APPLE-SA-2014-09-17-6 OS X Server 2.2.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-09-17-6 OS X Server 2.2.3 OS X Server 2.2.3 is now available and addresses the following: CoreCollaboration Available for: OS X Mountain Lion v10.8.5 Impact: A remote attacker may be able to execute arbitrary SQL queries Description: A S...
CVE-2014-4424
CVE-2014-4424 is an SQL injection vulnerability in CoreCollaboration’s Wiki Server on Apple OS X Server, affecting OS X Server before 2.2.3 and OS X Server 3.x before 3.2.1. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Apple addresses include OS X S...
Mac OS X : OS X Server < 2.2.3 Wiki SQL Injection
The remote Mac OS X 10.8 host has a version of OS X Server installe that is prior to 2.2.3. It is, therefore, affected by a SQL injection vulnerability in the Wiki Server component due to improper validation of user-supplied input. A remote attacker can exploit this to inject or manipulate SQL...
Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6
Jan. 11, 2014 Dmitry V. Levin 6:2.17-alt6 - Backported upstream fixes for sw bugs: 14547, 14699, 15003, 15014, 15073, 15122, 15160, 15234, 15330, 15465, 15736, 15754, 15759, 15855, 15856, 15857, 15917, 16038, 16072 including fixes for CVE-2012-4412, CVE-2012-4424, CVE-2013-4237, CVE-2013-4332,...
CVE-2013-4424
CVE-2013-4424 affects Red Hat JBoss Portal 6.1.0 (GateIn Portal component). The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially leading to arbitrary script execution in ...
Moderate: Red Hat Security Advisory: Red Hat JBoss Portal 6.1.0 security update
An update for the GateIn Portal component in Red Hat JBoss Portal 6.1.0 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...
[ MDVSA-2013:284 ] glibc
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:284 http://www.mandriva.com/en/support/security/ Package : glibc Date : November 25, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in glibc: Integ...
Ubuntu: Security Advisory (USN-1991-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1991-1: GNU C Library vulnerabilities
It was discovered that the GNU C Library incorrectly handled the strcoll function. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. CVE-2012-4412, CVE-2012-4424 It was discovered that the GNU C Library incorrectly handled multibyte characters in t...
CVE-2012-4424
Stack-based buffer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function...