Security update for libarchive (important)

libarchive was updated to fix 20 security issues. These security issues were fixed: - CVE-2015-8918: Overlapping memcpy in CAB parser bsc985698. - CVE-2015-8919: Heap out of bounds read in LHA/LZH parser bsc985697. - CVE-2015-8920: Stack out of bounds read in ar parser bsc985675. - CVE-2015-8921:...

[SECURITY] [DLA 554-1] libarchive security update

Package : libarchive Version : 3.0.4-3+wheezy2 CVE ID : CVE-2015-8917 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8924 CVE-2015-8925 CVE-2015-8926 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-4300 CVE-2016-4302 CVE-2016-4809...

Ubuntu: Security Advisory (USN-3033-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : libarchive vulnerabilities (USN-3033-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3033-1 advisory. Hanno Bck discovered that libarchive contained multiple security issues when processing certain malformed archive files. A remote attacker...

USN-3033-1: libarchive vulnerabilities

Hanno Böck discovered that libarchive contained multiple security issues when processing certain malformed archive files. A remote attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2015-8916, CVE-2015-8917...

openSUSE Security Update : libarchive (openSUSE-2016-770)

libarchive was updated to fix one security issue. This security issue was fixed : - CVE-2016-4809: Memory allocation error with gigantic symbolic links in cpio archives bsc984990. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

CVE-2015-4809

CVE-2015-4809 affects Oracle Outside In Technology (PDF Export SDK) used in Oracle Fusion Middleware 8.5.0/8.5.1/8.5.2. The vulnerability is described as unspecified and local, allowing a denial of service via the Outside In PDF Export SDK. Impact is limited to availability (CVSS v2 base score 1....

CVE-2014-4809

CVE-2014-4809 affects the WebSEAL component of IBM Security Access Manager for Web when e-community single sign-on is enabled. The IBM Security Access Manager for Web WebSEAL could become unresponsive under certain conditions, potentially causing a denial of service (component hang) with remote a...

[security bulletin] HPSBPV02918 rev.2 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Code Execution, Session Reuse

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03897409 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03897409 Version: 2 HPSBPV02918 rev....

CVE-2013-4809

CVE-2013-4809 is a SQL injection vulnerability in HP ProCurve Manager (PCM) 3.20 and 4.0, HP PCM+ 3.20 and 4.0, and HP Identity Driven Manager (IDM) 4.0. The flaw resides in the GetEventsServlet and is exploitable via the sort or dir parameters, potentially enabling remote code execution (reporte...

[security bulletin] HPSBPV02918 rev.1 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Code Execution, Session Reuse

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03897409 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03897409 Version: 1 HPSBPV02918 rev....

CVE-2011-4809

Multiple cross-site scripting XSS vulnerabilities in the HM Community comhmcommunity component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 language, 2 university, 3 persent, 4 companyname, 5 designation, 6 music, 7 books, 8 movies, 9 games, 10...

CVE-2011-4809

The CVE-2011-4809 entry concerns the HM Community (com_hmcommunity) component for Joomla! prior to version 1.01. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via profile save task parameters in index.php. Affec...

CVE-2010-4809

CVE-2010-4809 concerns a SQL injection in DBSite 1.0, specifically in index.php where the ID parameter can be manipulated to execute arbitrary SQL commands. The vulnerability is evidenced across multiple sources (NVD, CVE lists) and indicates remote exploitation potential with no authentication r...

CVE-2010-4809

creationtimestamp| type| source ---|---|--- 2010-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15512...

CVE-2009-4809

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing EFS Web Server 4.8 allows remote attackers to read arbitrary files via a .. dot dot in the vfolder parameter...

CVE-2009-4809

Directory traversal vulnerability in thumbnail.ghp in Easy File Sharing EFS Web Server 4.8 allows remote attackers to read arbitrary files via a .. dot dot in the vfolder parameter...

CVE-2009-4809

Affects Easy File Sharing (EFS) Web Server 4.8. The vulnerability is a directory traversal in thumbnail.ghp where an attacker can read arbitrary files by manipulating the vfolder parameter (dot-dot sequence). This is a file-read impact, enabling access to portions of the server’s filesystem. The ...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...