87 matches found
UBUNTU-CVE-2018-5357
ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c...
CVE-2012-5357
CVE-2012-5357 affects Ektron CMS prior to 8.02 SP5. The vulnerability arises from XslCompiledTransform with enablescript set to true, allowing remote code execution with NETWORK SERVICE privileges via crafted XSL data. Documentation and third-party sources confirm RCE potential in Ektron’s XSLT h...
CVE-2007-5357
CVE-2007-5357 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-5357
regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free...
CVE-2017-5357
CVE-2017-5357 affects GNU ed: the vulnerability is in regex.c for ed versions before 1.14.1, where a malformed command can trigger an invalid free and cause a denial of service (crash). The provided documents confirm the underlying cause and the resulting impact (availability disruption). Affecte...
CVE-2017-5357
regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free...
Fedora 25 : ed (2017-f87674ad41)
Security fix for CVE-2017-5357 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Fedora Update for ed FEDORA-2017-f87674ad41
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-5357
regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service crash via a malformed command, which triggers an invalid free...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2016:2453-1)
wireshark was updated to version 1.12.13 to fix the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bnc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bnc991013 - CVE-2016-6506: wireshark: WSP infinite loop bnc991015 - CVE-2016-6507: wireshark: MMSE...
SUSE SLES11 Security Update : wireshark (SUSE-SU-2016:2212-1)
This update to wireshark 1.12.13 fixes the following issues : - CVE-2016-6504: wireshark: NDS dissector crash bsc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bsc991013 - CVE-2016-6506: wireshark: WSP infinite loop bsc991015 - CVE-2016-6507: wireshark: MMSE infinite...
CVE-2016-5357
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2016-5357
CVE-2016-5357 affects Wireshark 1.12.x up to before 1.12.12 and 2.x up to before 2.0.4. The NetScreen file parser (wiretap/netscreen.c) mishandles sscanf unsigned‑integer parsing, enabling a remote attacker to crash the application (DoS) via a crafted file. Remediation in the public record is to ...
Debian DLA-538-1 : wireshark security update
The following vulnerabilities have been discovered in the Wheezy's Wireshark version : CVE-2016-5350 The SPOOLS dissector could go into an infinite loop CVE-2016-5351 The IEEE 802.11 dissector could crash CVE-2016-5353 The UMTS FP dissector could crash CVE-2016-5354 Some USB dissectors could cras...
[SECURITY] [DLA 538-1] wireshark security update
Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u2 CVE ID : CVE-2016-5350 CVE-2016-5351 CVE-2016-5353 CVE-2016-5354 CVE-2016-5355 CVE-2016-5356 CVE-2016-5357 CVE-2016-5359 The following vulnerabilities have been discovered in the Wheezys Wireshark version: CVE-2016-5350 The SPOOLS...
openSUSE Security Update : wireshark (openSUSE-2016-737)
This update for wireshark fixes an number of security issues. Issues in protocol dissectors could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file. - CVE-2016-5350: The SPOOLS dissector...
CVE-2016-5357
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2015-5357
This CVE affects Juniper Junos-operated switches: EX4600, QFX3500, QFX3600, and QFX5100. In the vulnerable software, Junos 13.2X51-D15 to -D25, 13.2X51 before -D30, and 14.1X53 before -D10, allow remote attackers to cause a denial of service by consuming CPU resources via unspecified vectors. The...
Juniper Networks Junos OS QFX5100/EX4600 Denial of Service Vulnerability
Junos OS on EX4600 and QFX series switches is prone to a DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...