CVE-2017-6153

Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a "Zip Bomb" attack...

CVE-2017-6153

CVE-2017-6153 affects F5 BIG-IP inflating/PEM module code used via iRules or PEM, enabling a Zip Bomb-induced data-plane disruption. Affected: BIG-IP 13.0.0–13.1.0.3, 12.1.0–12.1.3.1, 11.6.x, 11.5.x, 11.2.1. Fixed in 13.1.0.4; 12.1.3.2; 11.6.3.2 (and 11.5.6); other 11.x paths vary per version tab...

Design/Logic Flaw

Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. Maven Plugin 3.0 no longer has a dependency on commons-httpclient...

CVE-2017-1000397

CVE-2017-1000397 affects Jenkins Maven Plugin versions up to 2.17, which bundled Commons HttpClient that is vulnerable to CVE-2012-6153 due to improper SSL certificate verification, enabling MITM attacks. The issue is tied to the plugin’s transitive dependency on Commons HttpClient; Maven Plugin ...

Jenkins Multiple Vulnerabilities (Oct 2017) - Linux

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

BELL-CVE-2016-6153 CVE-2016-6153 does not affect BellSoft software

Bulletin has no description...

CVE-2016-6153

SQLite vulnerability CVE-2016-6153 affects os_unix.c where the temporary directory search algorithm is improperly implemented, potentially allowing local users to obtain sensitive information, cause application crashes, or other unspecified effects by using the current working directory for tempo...

CVE-2016-6153

osunix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service application crash, or have unspecified other impact by leveraging use of the current working directory for...

SUSE SLES11 Security Update : sqlite3 (SUSE-SU-2016:2021-1)

This update for sqlite3 fixes the following issues: The following security issue was fixed : - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2016:1945-1)

This update for sqlite3 fixes the following issues: The following security issue was fixed : - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

openSUSE Security Update : sqlite3 (openSUSE-2016-970)

This update for sqlite3 fixes the following issues : The following security issue was fixed : - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394 This update was imported from the SUSE:SLE-12-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SU-2016:2021-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: The following security issue was fixed: - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394...

openSUSE Security Update : sqlite3 (openSUSE-2016-931)

This update for sqlite3 fixes the following issues : - CVE-2016-6153: Tempdir Selection Vulnerability could have led to data leakage under very specific, non-default circumstances boo987394 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SUSE-SU-2016:1945-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: The following security issue was fixed: - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394...

Fedora 24 : sqlite (2016-0138339b54)

Security fix for CVE-2016-6153 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

MGASA-2016-0255 Updated sqlite3 packages fix security vulnerability

It was discovered that sqlite3 would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions. This could result in information leakage as less secure global temporary directories e.g., /var/tmp or /tmp would be...

Updated sqlite3 packages fix security vulnerability

It was discovered that sqlite3 would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions. This could result in information leakage as less secure global temporary directories e.g., /var/tmp or /tmp would be...

SOL15364328 - Apache vulnerabilities CVE-2012-5783, CVE-2012-6153, and CVE-2014-3577

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

CVE-2015-6153

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142,...

CVE-2015-6153

CVE-2015-6153 is part of the Microsoft browser memory corruption family affecting Internet Explorer 11 and Microsoft Edge. The connected data describe memory corruption when processing crafted web content, enabling remote code execution or memory-related denial of service. The vulnerabilities are...