DLA-517-1 imagemagick - security update

Bulletin has no description...

CVE-2016-4562

The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impa...

CVE-2016-4562

CVE-2016-4562 affects ImageMagick’s DrawDashPolygon in MagickCore/draw.c. It affects ImageMagick before 6.9.4-0 and before 7.0.1-2, where vertex integer data calculations are mishandled, enabling a remote attacker to trigger a denial of service via a crafted file (buffer overflow and application ...

CVE-2013-4562

The CVE-2013-4562 weakness affects the omniauth-facebook gem (versions 1.4.1 prior to 1.5.0). The root cause is that the session parameter is not properly stored, enabling remote attackers to perform CSRF via the state parameter. Consequences include potential CSRF attacks against users authentic...

SuSE Update for update openSUSE-SU-2012:1620-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201216201.nasl 8456 2018-01-18 06:58:40Z teissa $ SuSE Update for update openSUSE-SU-2012:1620-1 update Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for update (openSUSE-SU-2012:1620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11.2 Security Update : libssh2 (SAT Patch Number 7073)

This update of libssh fixes multiple integer overflows. CVE-2012-4562 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

Fedora Update for libssh FEDORA-2012-18687

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[ MDVSA-2012:175 ] libssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:175 http://www.mandriva.com/security/ Package : libssh Date : November 29, 2012 Affected: 2011. Problem Description: Multiple double free, buffer overflow, invalid free and improper overflow checks...

CVE-2012-4562

CVE-2012-4562 : The provided documents confirm a vulnerability in libssh involving multiple buffer overflow, double-free, and integer overflow issues. The root cause is memory-management/overflow flaws in libssh up to version 0.5.2, allowing a remote attacker to potentially crash the service or e...

Mandriva Linux Security Advisory : libssh (MDVSA-2012:175)

Multiple double free, buffer overflow, invalid free and improper overflow checks vulnerabilities was found and corrected in libssh CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. The updated packages have been upgraded to the 0.5.3 version which is not affected by these issues...

Ubuntu Update for libssh USN-1640-1

Ubuntu Update for Linux kernel vulnerabilities USN-1640-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16401.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libssh USN-1640-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Fedora 17 : libssh-0.5.3-1.fc17 (2012-18677)

This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 18 : libssh-0.5.3-1.fc18 (2012-18610)

This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libssh vulnerabilities (USN-1640-1)

Xi Wang and Florian Weimer discovered that libssh incorrectly handled memory. A remote attacker could use this to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. Note that Tenable Network...

CVE-2012-4562

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service infinite loop or crash and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities...

Code injection

Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typ...

CVE-2010-4562

CVE-2010-4562 affects Microsoft Windows platforms when using IPv6. It allows remote attackers to infer if a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and observing an Echo Reply (as demonstrated by thcping). The entry notes a typographical collision: so...

CVE-2011-4562

CVE-2011-4562 describes cross-site scripting (XSS) in the Redirection plugin for WordPress (version 2.2.9). The vulnerability affects view/admin/log_item.php and view/admin/log_item_details.php, allowing an attacker to inject arbitrary web script or HTML via the Referer header in a request to a n...

Cross site scripting

Cross-site scripting XSS vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562...