47 matches found
Oracle Linux 8 : .NET / 6.0 (ELSA-2023-6245)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6245 advisory. 6.0.124-1.0.1 - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14466 Tenable has extracted the preceding description block directly from the...
Ubuntu 22.04 LTS : Trove vulnerabilities (USN-6245-1)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6245-1 advisory. Adam Bell discovered that Trove incorrectly handled arguments to the backup command. A remote attacker could possibly use this issue to execute arbitrary code...
[SECURITY] [DLA 3376-1] svgpp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3376-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 31, 2023 https://wiki.debian.org/LTS -...
[SECURITY] [DLA 2872-1] agg security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2872-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 31, 2021 https://wiki.debian.org/LTS -...
CVE-2020-6245
SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Control of Resource Identifiers...
CVE-2019-6245
CVE-2019-6245 affects svgpp (SVG++), via Anti-Grain Geometry (AGG) 2.4 integration. The issue is in agg::cell_aa::not_equal where dx is computed as (x2 - x1); if dx >= dx_limit (16384 <
CVE-2016-6245
OpenBSD 5.8 and 5.9 are affected. Local users can trigger a denial of service (kernel panic) by providing a large size to the getdents system call. The available sources do not include a confirmed patch version or remediation steps. No exploitation details are provided beyond the described impact...
wireshark security, bug fix, and enhancement update
1.10.14-7.0.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.10.14-7 - Rebase some tvbuff API from upstream to 1.10.14 - Fixes crash when tvblengthremaining is used - Related: CVE-2015-6244 1.10.14-6 - Security patch - Resolves: CVE-2015-3182 1.10.14-5 - Fix crash...
openSUSE Security Update : wireshark (openSUSE-2015-683)
wireshark was updated to version 1.12.8 to fix ten security issues. These security issues were fixed : - CVE-2015-6247: The dissectopenflowtablemodv5 function in epan/dissectors/packet-openflowv5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 did not validate a certain offset value...
Fedora 22 : wireshark-1.12.7-2.fc22 (2015-13945)
Enable libnl3 see rhbz1207386, rhbz1247566 - Remove airpcap switch doesn't have any effect on Linux - Backport patch no. 11 - Fixed building with F24+ Ver. 1.12.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
Debian DSA-3367-1 : wireshark - security update
Multiple vulnerabilities were discovered in the dissectors/parsers for ZigBee, GSM RLC/MAC, WaveAgent, ptvcursor, OpenFlow, WCCP and in internal functions which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Fedora 23 : wireshark-1.12.7-2.fc23 (2015-13946)
Enable libnl3 see rhbz1207386, rhbz1247566 - Remove airpcap switch doesn't have any effect on Linux - Backport patch no. 11 - Fixed building with F24+ Ver. 1.12.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
CVE-2015-6245
epan/dissectors/packet-gsmrlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...
CVE-2015-6245
CVE-2015-6245 affects Wireshark 1.12.x (GSM RLC/MAC dissector). The GSM RLC/MAC dissector uses incorrect integer data types, enabling an attacker to cause a denial of service via a crafted packet that triggers an infinite loop. The vulnerability is addressed in Wireshark 1.12.7 (and related advis...
CVE-2013-6245
Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors...
CVE-2013-6245
SAP Sybase Adaptive Server Enterprise (ASE) is affected by CVE-2013-6245. The vulnerability affects ASE versions prior to 15.0.3 ESD#4.3, 15.5 prior to 15.5 ESD#5.3, and 15.7 prior to 15.7 SP50 or SP100, where remote authenticated users may execute arbitrary code via unspecified vectors. The Ness...
SuSE 11.1 Security Update : openssl (SAT Patch Number 6245)
This update of openssl fixes an integer conversation issue which could cause a heap-based memory corruption. CVE-2012-2110 Additionally, a check for negative buffer length values was added CVE-2012-2131 and the stack made non-executable by marking the enhanced Intel SSSE3 assembler code as not...
CVE-2008-6245
SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6245
CVE-2008-6245 affects Scripts For Sites (SFS) EZ BIZ PRO. The vulnerability is a SQL injection in track.php, exploitable via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The CVE listing notes high impact with network access and no authentication. No remediation d...