Google Chrome < 117.0.5938.132 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 117.0.5938.132. It is, therefore, affected by multiple vulnerabilities as referenced in the 202309stable-channel-update-for-desktop27 advisory. - Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allow...

Stable Channel Update for Desktop

The Stable channel has been updated to 117.0.5938.132 for Windows, Mac and Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority ...

CefSharp affected by heap buffer overflow in WebP

Google is aware that an exploit for CVE-2023-4863 exists in the wild. Description Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical References -...

GHSA-J646-GJ5P-P45G CefSharp affected by heap buffer overflow in WebP

Google is aware that an exploit for CVE-2023-4863 exists in the wild. Description Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical References -...

Oracle Linux 7 : open-vm-tools (ELSA-2023-5217)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5217 advisory. 11.0.5-3.0.1 - fix spaces in vmware udev rule for scsi devices Orabug: 24461968 - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. Orabug: 22815019 -...

RHEL 7 : open-vm-tools (RHSA-2023:5217)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5217 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...

Ubuntu: Security Advisory (USN-5217-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5217

creationtimestamp| type| source ---|---|--- 2020-01-23 08:37:42+00:00| seen| https://t.me/cveNotify/395...

CVE-2020-5217

CVE-2020-5217 affects the Ruby gem Secure Headers. The vulnerability is a directive injection in versions before 3.8.0, 5.1.0, and 6.2.0 when user-supplied input is passed to append/override_content_security_policy_directives, allowing semicolons to be injected and potentially override directives...

CVE-2020-5217 Directive injection when using dynamic overrides with user input in RubyGems secure_headers

In Secure Headers RubyGem secureheaders, a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be us...

CVE-2019-5217

The CVE-2019-5217 entry concerns Huawei Mate 9 Pro smartphones (prior to versions such as LON-L29C/LON-AL00B9.0.1.150) with an information-disclosure vulnerability. According to NVD, an attacker could view photos after performing a sequence of operations without unlocking the device, yielding a P...

CVE-2018-5217

CVE-2018-5217 affects K7 Antivirus 15.1.0306. The vulnerable component is the kernel‑mode driver K7Sentry.sys, exploitable via IOCTL 0x95002578. The root cause is unvalidated input values from this IOCTL, allowing a local user to cause a denial of service (BSOD) and potentially other unspecified ...

CVE-2016-5217

In the connected Debian advisory (DSA-3731-1) for chromium-browser, CVE-2016-5217 is described as 'insufficient validation' in the pdfium library. No further impact details are provided; remediation is to upgrade to chromium-browser 55.0.2883.75-1~deb8u1 (Jessie).

CVE-2017-5217

Installing a zero-permission Android application on certain Samsung Android devices with KK4.4, L5.0/5.1, and M6.0 software can continually crash the systemserver process in the Android OS. The zero-permission app will create an active install session for a separate app that it has embedded withi...

CVE-2017-5217

CVE-2017-5217 affects certain Samsung Android devices (K(KK 4.4), L 5.x, M 6.0). A zero-permission app can trigger an active install session for an embedded APK, which is written to /data/app. Samsung’s modified PackagePrefetcher may parse these APKs during boot, causing an uncaught OutOfMemoryEr...

Fedora 25 : chromium (2016-a815b7bf5d)

Update to Chromium 55. Security fix for CVE-2016-5199, CVE-2016-5200, CVE-2016-5201, CVE-2016-5202, CVE-2016-9651, CVE-2016-5208, CVE-2016-5207, CVE-2016-5206, CVE-2016-5205, CVE-2016-5204, CVE-2016-5209, CVE-2016-5203, CVE-2016-5210, CVE-2016-5212, CVE-2016-5211, CVE-2016-5213, CVE-2016-5214,...

Fedora 24 : chromium (2016-e0e1cb2b2b)

Update to Chromium 55. Security fix for CVE-2016-5199, CVE-2016-5200, CVE-2016-5201, CVE-2016-5202, CVE-2016-9651, CVE-2016-5208, CVE-2016-5207, CVE-2016-5206, CVE-2016-5205, CVE-2016-5204, CVE-2016-5209, CVE-2016-5203, CVE-2016-5210, CVE-2016-5212, CVE-2016-5211, CVE-2016-5213, CVE-2016-5214,...

CVE-2015-5217

CVE-2015-5217 affects Ipsilon 0.1.0 prior to 1.0.1. The IdP server’s providers/saml2/admin.py fails to properly enforce permission checks when updating the SAML2 SP owner, enabling remote authenticated users to trigger a denial of service by creating a duplicate SP name. Affected: Ipsilon IdP (SA...

Fedora Update for ipsilon FEDORA-2015-15292

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : ipsilon-1.1.1-2.fc23 (2015-15291)

Rebased to 1.1.1 release ---- ipsilon-1.0.0-5.fc23 - Backported some patches - Fix for CVE-2015-5215/CVE-2015-5216/CVE-2015-5217 ipsilon-1.0.0-5.fc22 - Backported some patches - Fix for CVE-2015-5215/CVE-2015-5216/CVE-2015-5217 Note that Tenable Network Security has extracted the preceding...