openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2055-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 27 : chromium (2018-09b59b0227)

Update to Chromium 67. Security fix for CVE-2018-6123 CVE-2018-6124 CVE-2018-6125 CVE-2018-6126 CVE-2018-6127 CVE-2018-6128 CVE-2018-6129 CVE-2018-6130 CVE-2018-6131 CVE-2018-6132 CVE-2018-6133 CVE-2018-6134 CVE-2018-6135 CVE-2018-6136 CVE-2018-6137 CVE-2018-6148 Note that Tenable Network Securit...

Security Bulletin: Some security vulnerabilities have been identified in Jazz Team Server shipped with Rational Insight (CVE-2014-6131, CVE-2014-6129)

Summary Jazz Team Server is shipped as a component of Rational Insight, in the areas of Data Collection Component and Jazz Reporting Service.. Information about security vulnerabilities affecting Jazz Team Server have been published in a security bulletin. Vulnerability Details Please consult the...

Fedora Update for chromium FEDORA-2018-7c80aaef26

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : chromium-browser (RHSA-2018:1815)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1815 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 67.0.3396.62. Security Fixes:...

CVE-2018-6129

creationtimestamp| type| source ---|---|--- 2018-06-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44863...

Security update for chromium (important)

This update for chromium to version 66.0.3359.181 fixes the following issues: The following security issues were fixed boo1095163: CVE-2018-6123: Use after free in Blink. CVE-2018-6124: Type confusion in Blink. CVE-2018-6125: Overly permissive policy in WebUSB. CVE-2018-6126: Heap buffer overflow...

Google Chrome < 67.0.3396.62 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 67.0.3396.62. It is, therefore, affected by multiple vulnerabilities as referenced in the 201805stable-channel-update-for-desktop58 advisory. - Allowing the chrome.debugger API to attach to Web UI pages in DevTools in...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 67 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 67.0.3396.62 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

CVE-2017-6129

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail...

CVE-2017-6129

Summary: CVE-2017-6129 affects F5 BIG-IP APM (versions 13.0.0 and 12.1.2). The vulnerability arises when APM tunneled VPN flows cause a VPN/PPP connflow to be prematurely freed or trigger TMM to assert “flow not in use,” potentially disrupting traffic or causing failover within the device group. ...

Amazon Linux AMI : libtommath / libtomcrypt (ALAS-2017-864)

possible OP-TEE Bleichenbacher attack : The rsaverifyhashex function in rsaverifyhash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA signatures or public...

Medium: libtommath, libtomcrypt

Issue Overview: possible OP-TEE Bleichenbacher attack: The rsaverifyhashex function in rsaverifyhash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA...

CVE-2015-6129

...

CVE-2015-6129

CVE-2015-6129 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-6129

CVE-2016-6129 affects LibTomCrypt (used by OP-TEE before 2.2.0). The rsa_verify_hash_ex function does not validate that the message length matches the ASN.1 encoded data length, enabling Bleichenbacher-like forgery of RSA signatures or public certificates. Public disclosures in multiple feeds (De...

[SECURITY] [DLA 612-1] libtomcrypt security update

Package : libtomcrypt Version : 1.17-3.2+deb7u1 CVE ID : CVE-2016-6129 It was discovered that the implementation of RSA signature verification in libtomcrypt is vulnerable to the Bleichenbacher signature attack. If an RSA key with exponent 3 is used it may be possible to forge a PKCS1 v1.5...

CVE-2014-6129

CVE-2014-6129 affects IBM Jazz Team Server (JTS)–based products (CLM, RRC, RDNG, RELM, RTC, RQM, RSA DM, Rhapsody DM, etc.). Described as an authenticated issue where a user with knowledge of JTS can delete another user’s dashboard via unspecified vectors. Affected versions include Rational CLM 3...

FreeBSD : libutp -- remote denial of service or arbitrary code execution (0523fb7e-8444-4e86-812d-8de05f6f0dce)

NVD reports : Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted 'micro transport protocol packets.' %NASLMINLEVEL 70300 C...

DameWare Mini Remote Control 4.0 < 4.9 (Client Agent) Remote Exploit

No description provided by source. / / / / / / / / \ / / // / / / / // // / / / .// //// ///====================== DameWare Mini Remote Control Client Agent Service Another Pre-Authentication Buffer Overflow By Jackson Pollocks No5 www.jpno5.com Summary...