openSUSE Security Update : gpg2 (openSUSE-SU-2014:0866-1)

gpg2 was patched to fix a possible DoS. This security issue was fixed : - Denial of service through infinite loop with garbled compressed data packets CVE-2014-4617 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Fedora 19 : gnupg2-2.0.24-1.fc19 (2014-7797)

Minor security update from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora Update for gnupg2 FEDORA-2014-7796

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gnupg security update

Package : gnupg Version : 1.4.10-4+squeeze5 CVE ID : CVE-2014-4617 Debian Bug : 752497 Jean-Rene Reinhard, Olivier Levillain and Florian Maury reported that GnuPG, the GNU Privacy Guard, did not properly parse certain garbled compressed data packets. A remote attacker could use this flaw to mount...

Fedora 20 : gnupg2-2.0.24-1.fc20 (2014-7796)

Minor security update from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

MGASA-2014-0276 Updated gnupg & gnupg2 packages fixes CVE-2014-4617

Updated gnupg and gnupg2 packages fix security vulnerability: GnuPG versions before 1.4.17 and 2.0.24 are vulnerable to a denial of service which can be caused by garbled compressed data packets which may put gpg into an infinite loop CVE-2014-4617...

[SECURITY] [DSA 2968-1] gnupg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2968-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2968-1] gnupg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2968-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 27, 2014 http://www.debian.org/security/faq -...

Debian DSA-2967-1 : gnupg - security update

Jean-Rene Reinhard, Olivier Levillain and Florian Maury reported that GnuPG, the GNU Privacy Guard, did not properly parse certain garbled compressed data packets. A remote attacker could use this flaw to mount a denial of service against GnuPG by triggering an infinite loop. %NASLMINLEVEL 70300 ...

[SECURITY] [DSA 2967-1] gnupg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2967-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 25, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2967-1] gnupg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2967-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 25, 2014 http://www.debian.org/security/faq -...

BELL-CVE-2014-4617 CVE-2014-4617 does not affect BellSoft software

Bulletin has no description...

CVE-2014-4617

GnuPG DoS due to malformed compressed packets in do_uncompress (g10/compress.c). Affected: GnuPG 1.x before 1.4.17 and 2.x before 2.0.24. Attack uses crafted a3 01 5b ff sequence to trigger an infinite loop. Impact: denial of service. Remediation: upgrade to versions 1.4.17+ or 2.0.24+ where fixe...

CVE-2014-4617

The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service infinite loop via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence...

Debian Security Advisory DSA 2967-1 (gnupg - security update)

Jean-René Reinhard, Olivier Levillain and Florian Maury reported that GnuPG, the GNU Privacy Guard, did not properly parse certain garbled compressed data packets. A remote attacker could use this flaw to mount a denial of service against GnuPG by triggering an infinite loop. OpenVAS Vulnerabilit...

CVE-2013-4617

CVE-2013-4617 affects Jahia xCM prior to 6.6.2. The issue is that the Set-Cookie header for the JSESSIONID cookie does not use the HTTPOnly flag, which can allow remote attackers to access the cookie via client-side scripts and potentially expose sensitive information. The provided documents conf...

CVE-2012-4617

The CVE-2012-4617 issue affects Cisco IOS, IOS XE, and IOS XR BGP implementations. A vulnerability exists where a router can be driven to a DoS by processing a malformed BGP attribute received from a peer on an existing BGP session, triggering multiple connection/session resets. The affected prod...

Gentoo Security Advisory GLSA 201206-17 (virtualenv)

The remote host is missing updates announced in advisory GLSA 201206-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora Update for python-virtualenv FEDORA-2011-17289

Check for the Version of python-virtualenv OpenVAS Vulnerability Test Fedora Update for python-virtualenv FEDORA-2011-17289 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for python-virtualenv FEDORA-2011-17289

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...