Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5508)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5508 advisory. - scsi: libsas: delete sas port if expander discover failed Jason Yan Orabug: 30580687 CVE-2019-15807 - scsi: qla2xxx: fix a potential NULL pointer...

NetApp Clustered Data ONTAP 9.2 Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-29588 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5508 Summary Description: NetApp reported that Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker...

NetApp Clustered Data ONTAP 9.2 Vulnerability - Lenovo Support US

No description provided...

CVE-2019-5508

CVE-2019-5508 concerns NetApp Clustered Data ONTAP vulnerability that enables a Denial of Service via l2ping. Public details in the connected documents confirm affected software versions primarily include NetApp Clustered Data ONTAP 9.2 through 9.4 (with some sources extending to 9.6). The vulner...

NetApp Clustered Data ONTAP CVE-2019-5508 Denial of Service Vulnerability

Description NetApp Clustered Data ONTAP is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause denial-of-service conditions. Clustered Data ONTAP 9.2 through 9.6 versions are vulnerable. Technologies Affected NetApp Clustered Data ONTAP 9.2 NetApp Clustere...

devolo dLAN 550 duo+ Starter Kit - Remote Code Execution

devolo dLAN 550 duo+ Starter Kit Remote Code Execution Vendor: devolo AG Product web page: https://www.devolo.com Affected version: dLAN 500 AV Wireless+ 3.1.0-1 i386 Summary: Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a cost-effective and helpful networking alternative for an...

F5 Networks BIG-IP : BIG-IP PEM vulnerability (K10329515)

Under certain conditions, TMM may produce a core file and restart when processing compressed data though a virtual server with an associated PEM profile using the content insertion option. CVE-2018-5508 Impact The Traffic Management Microkernel TMM generates a core file and restarts. If configure...

CVE-2018-5508

CVE-2018-5508 affects F5 BIG-IP PEM (PEM profile with content insertion) and can cause the Traffic Management Microkernel (TMM) to crash, generate a core file, and restart under certain conditions when processing compressed data. Affected versions: BIG-IP PEM 13.0.0; 12.0.0–12.1.3.1; 11.6.0–11.6....

DEBIAN-CVE-2017-5508

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service application crash via a crafted TIFF file...

CVE-2017-5508

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service application crash via a crafted TIFF file...

CVE-2017-5508

CVE-2017-5508 is a heap-based buffer overflow in ImageMagick's PushQuantumPixel function that can crash the application (DoS) via a crafted TIFF file. Affected: ImageMagick prior to 6.9.7-3 and 7.x prior to 7.0.4-3. Connected advisories confirm this vulnerability and note fixes in later imagemagi...

CVE-2017-5508

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service application crash via a crafted TIFF file...

CVE-2017-5508

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service application crash via a crafted TIFF file...

CVE-2016-5508

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo...

CVE-2016-5508

CVE-2016-5508 affects Oracle Sun Systems Products Suite Solaris Cluster 4.3, specifically the Cluster Geo subcomponent. The vulnerability is described as an unspecified local vulnerability in Solaris Cluster that can affect confidentiality. Technical details in connected documents show a local-pr...

CVE-2015-5508

CVE-2015-5508 refers to a CSRF vulnerability in The eXtensible Catalog (XC) Drupal Toolkit, specifically the XC NCIP Provider module. The issue arises because certain NCIP-Provider-related URLs aren’t sufficiently CSRF-protected, allowing an attacker to cause users with the administer ncip provid...

The eXtensible Catalog (XC) Drupal Toolkit - Critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2015-121

The eXtensible Catalog Drupal Toolkit is a set of Drupal modules to harvest records of the XC Schema format from a Metadata Services Toolkit MST. The XC NCIP Provider module doesn't sufficiently protect some URLs against CSRF. A malicious user can cause a user with "administer ncip providers"...

Code injection

Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator PRNG, which makes it easier for remote attackers to guess the value via unspecified vectors. NOTE: this issue was SPLIT from CVE-2012-5508 due to different vulnerability...

CVE-2012-5508

CVE-2012-5508 (and related CVE-2012-6661) affects Zope before 2.13.19 used with Plone older than 4.2.3 and Plone 4.3 beta1. Root cause: PRNG not reseeded, enabling remote attackers to infer PRNG state and potentially abuse password resets via unspecified vectors. Mitigation: upgrade to Zope 2.13....

CVE-2014-5508

CVE-2014-5508 describes multiple integer overflows in the HelpServ module (mod-helpserv.c) of srvx 1.3.1 that allow a remote authenticated IRCops or HelpServ bot managers to trigger a denial of service (infinite loop) by sending a large value in the EmptyInterval parameter or through certain inte...