96 matches found
CVE-2018-6170
CVE-2018-6170 refers to a type confusion/bad cast in PDFium used by Google Chrome, affecting versions prior to 68.0.3440.75. The vulnerability enables a crafted PDF to trigger heap corruption, with CVSS3 base score 8.8 (HIGH) and CVSS2 6.8 (MEDIUM). Affected product: Google Chrome (PDFium compone...
Updated chromium-browser-stable packages fix security vulnerabilities
Chromium-browser 68.0.3440.106 fixes security issues: Multiple flaws were found in the way Chromium 67.0.3396.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...
FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)
Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:2134-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2017-6170
CVE-2017-6170 is rejected/not used; this CVE entry does not represent an active vulnerability.
Security update for bind (important)
This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...
SUSE-SU-2017:1000-1 Security update for bind
This update for bind fixes the following security issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing...
SUSE-SU-2017:0999-1 Security update for bind
This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...
SUSE SLES12 Security Update : bind (SUSE-SU-2017:0999-1)
This update for bind fixes the following issues: CVE-2017-3137 bsc1033467: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion...
Fedora Update for bind99 FEDORA-2016-9417b4c1dc
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 23 : bind99 (2016-8e39076950)
Security fix for CVE-2016-6170 ---- Security fix for CVE-2016-8864 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 24 : bind99 (2016-9417b4c1dc)
Allow zone size limit CVE-2016-6170 ---- Security fix for CVE-2016-8864 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...
GLSA-201610-07 : BIND: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201610-07 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a Denial of Service condition...
CVE-2016-6170
ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service secondary DNS server crash via a large AXFR response, and possibly allows IXFR servers to cause a denial of service IXFR client crash via a large IXFR response...
CVE-2016-6170
CVE-2016-6170 affects ISC BIND up to 9.11.0b1 (and related 9.9.9-P1, 9.10.x, etc.). The provided records describe a denial-of-service risk: a primary DNS server can crash a secondary server via a large AXFR, IXFR responses, and an authenticated UPDATE could crash the primary. Documented affected ...
Microsoft Edge Elevation of Privilege (MS15-125: CVE-2015-6170)
An elevation of privilege vulnerability has been reported in Microsoft Edge. The vulnerability is due to an error in the way that Microsoft Edge validates permissions under specific conditions. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with a...
CVE-2014-6170
CVE-2014-6170 affects IBM WebSphere Message Broker and IBM Integration Bus. The HTTPInput node can return a SOAP fault that reveals sensitive information, enabling remote attackers to access partial confidential data. Affected products/versions include IBM Integration Bus V9.0, WebSphere Message ...
CVE-2013-6170
CVE-2013-6170 affects Juniper Networks Junos OS (Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1) in a Next-Generation Multicast VPN (NGEN MVPN) environment. The vulnerability arises from handling a large number of crafted PIM (S,G) jo...