Security Bulletin: Vulnerabilities in OpenSSH affect IBM Security Network Protection (CVE-2015-5352, CVE-2015-6563, and CVE-2015-6564)

Summary Security vulnerabilities have been discovered in OpenSSH, which is used by IBM Security Network Protection. Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, caused by an error when making connectio...

Security Bulletin: Vulnerabilities in Kerberos (krb5) affect IBM Security Network Protection (CVE-2014-5352, CVE-2014-5353, CVE-2014-5355, CVE-2014-9421, and CVE-2014-9422)

Summary IBM Security Network Protection uses Kerberos krb5 to provide network authentication. The Kerberos krb5 version that is shipped with IBM Security Network Protection contains multiple security vulnerabilities. Vulnerability Details CVE-ID: CVE-2014-5352 Description: MIT krb5 could allow a...

Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.4

6.7p1-alt1.M70P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172046 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...

Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.4

6.7p1-alt1.M60P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172047 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2016:2453-1)

wireshark was updated to version 1.12.13 to fix the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bnc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bnc991013 - CVE-2016-6506: wireshark: WSP infinite loop bnc991015 - CVE-2016-6507: wireshark: MMSE...

SUSE SLES11 Security Update : wireshark (SUSE-SU-2016:2212-1)

This update to wireshark 1.12.13 fixes the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bsc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bsc991013 - CVE-2016-6506: wireshark: WSP infinite loop bsc991015 - CVE-2016-6507: wireshark: MMSE infinite...

Wireshark Multiple DoS Vulnerabilities-05 (Aug 2016) - Mac OS X

Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-5352

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-5352

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-5352

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-5352

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2016-5352

Technical details for CVE-2016-5352 are not provided in the connected documents. The Initial description mentions a DoS via crafted IEEE 802.11 packets in Wireshark 2.x before 2.0.4, with no further specifics.

NUUO NVRmini 2 3.0.8 - Remote Command Injection (Shellshock)

NUUO NVRmini 2 3.0.8 - Remote Command Injection Shellshock NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: Firmware Version: 02.02.00 NVR Version: 02.02.0000.0040 Device Pack Version: 04.07.0000.0030 Summary: NUUO...

NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution

i? NUUO NVRmini 2 NE-4160 ShellShock Remote Code Execution Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: Firmware Version: 02.02.00 NVR Version: 02.02.0000.0040 Device Pack Version: 04.07.0000.0030 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with...

CVE-2016-5352

epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20160510)

Security Fixes : - It was found that the OpenSSH client did not properly enforce the ForwardX11Timeout setting. A malicious or compromised remote X application could possibly use this flaw to establish a trusted connection to the local X server, even if only untrusted X11 forwarding was requested...

openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2016:0741 An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RedHat Update for openssh RHSA-2016:0741-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201512-04

Gentoo Linux Local Security Checks GLSA 201512-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201512-04 : OpenSSH: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201512-04 OpenSSH: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Impact : Workaround : There is no known workaround at this time...