CVE-2016-5147

CVE-2016-5147 is a Chrome/Blink UXSS issue where deferred page loads are mishandled, allowing remote injection of script/HTML via crafted sites. Affected: Blink in Google Chrome (versions prior to 53.0.2785.89 on Windows/OS X and prior to 53.0.2785.92 on Linux). Impact aligned with Cross-site Scr...

Fedora Update for chromium FEDORA-2016-bf8c64a060

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_31-2016-08) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

[SECURITY] [DSA 3660-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3660-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 05, 2016 https://www.debian.org/security/faq -...

Design/Logic Flaw

The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of...

CVE-2015-7551

The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of...

CVE-2015-7551

The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of...

Fedora 23 : ruby-2.2.4-47.fc23 (2015-eef21b972e)

Update to Ruby 2.2.4 including security fix for CVE-2009-5147 and CVE-2015-7551. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 22 : ruby-2.2.4-47.fc22 (2015-c4409eb73a)

Update to Ruby 2.2.4 including security fix for CVE-2009-5147 and CVE-2015-7551. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

FreeBSD : Ruby -- unsafe tainted string vulnerability (3b50881d-1860-4721-aab1-503290e23f6c)

Ruby developer reports : There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi. And, about DL, CVE-2009-5147 was fixed at Ruby 1.9.1, but not fixed ...

ruby: unsafe tainted string usage

There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi...

Unsafe tainted string usage in Fiddle and DL

There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi. And, about DL, CVE-2009-5147 was fixed at Ruby 1.9.1, but not fixed at other branches, then...

Ruby -- unsafe tainted string vulnerability

Ruby developer reports: There is an unsafe tainted string vulnerability in Fiddle and DL. This issue was originally reported and fixed with CVE-2009-5147 in DL, but reappeared after DL was reimplemented using Fiddle and libffi. And, about DL, CVE-2009-5147 was fixed at Ruby 1.9.1, but not fixed a...

SUSE-SU-2015:1889-1 Security update for ruby19

ruby19 was updated to fix two security issues. The following vulnerabilities were fixed: CVE-2015-1855: Ruby OpenSSL hostname verification was too permissive bsc926974. CVE-2009-5147: DL::dlopen could have loaded a library with tainted library name even if $SAFE 0 bsc939860...

[SECURITY] [DLA 299-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.302-2squeeze5 CVE ID : CVE-2009-5147 "sheepman" fixed a vulnerability in Ruby 1.8: DL::dlopen could open a library with tainted name even if $SAFE 0. For Debian 6 “Squeeze”, this issue has been fixed in ruby1.8 1.8.7.302-2squeeze5...

CVE-2015-5147

Stack-based buffer overflow in the headeranchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2015-5147

Stack-based buffer overflow in the headeranchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2015-5147

Stack-based buffer overflow in the headeranchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2015-5147

The CVE covers Redcarpet’s HTML renderer, where the header_anchor function contains a stack-based buffer overflow introduced before version 3.3.2. This flaw can cause a crash (DoS) and may allow arbitrary code execution via unspecified vectors. The vulnerability affects the header_anchor path in ...

CVE-2014-5147

CVE-2014-5147 affects Xen 4.4.x on 64-bit ARM; the hypervisor fails to properly handle traps from a guest domain that use a different address width. This can allow local guest users to trigger a denial of service (host crash) via a crafted 32-bit process. The connected sources (SU​SE, Red Hat, De...