Debian: Security Advisory (DLA-1690-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : live555 (openSUSE-2019-58)

This update fixes two security issues in live555 : - CVE-2018-4013: Remote code execution vulnerability bsc1114779 - CVE-2019-6256: Denial of Service issue with RTSP-over-HTTP tunneling via x-sessioncookie HTTP headers boo1121892 This library is statically linked into VLC. However VLC is not...

openSUSE: Security Advisory for live555 (openSUSE-SU-2019:0058-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-6256

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...

CVE-2019-6256

A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...

CVE-2019-6256

LIVE555 Media Server libraries (liblivemedia) are affected by CVE-2019-6256. RTSP-over-HTTP tunneling enabled on liblivemedia servers can trigger an invalid function pointer dereference during error handling when two requests (GET and POST) with identical x-sessioncookie are sent in the same TCP ...

CVE-2017-6256

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or potential escalation of...

CVE-2017-6256

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or potential escalation of...

CVE-2017-6256

NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the DxgkDdiEscape handler where a user-supplied value is used as an index into an array without proper validation, potentially leading to denial of service or privilege escalation. Documented as CVE-2017-6256, this affec...

CVE-2016-6256

SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity XXE attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.inWCSX/com.sap.b1i.vplatform.runtime/INBWSCALLSYNCXPT/INBWSCALLSYNCXPT.ipo/proc, aka SAP Security Note 2378065...

CVE-2016-6256

SAP Business One for Android 1.2.3 is affected by CVE-2016-6256. A remote attacker can exploit an XML External Entity (XXE) vulnerability in the B1iXcellerator endpoint (paths including …INB_WS_CALL_SYNC_XPT/INB_WS_CALL_SYNC_XPT.ipo/proc) to access sensitive data, potentially cause DoS, or enable...

CVE-2007-6256

CVE-2007-6256 is rejected/not used and does not represent an active vulnerability entry.

CVE-2012-6256

CVE-2012-6256 entry is rejected/not used and does not represent an active vulnerability.

CVE-2013-6256

CVE-2013-6256 entry rejected; not associated with any vulnerability in 2013.

CVE-2012-6256

...

CVE-2013-6256

...

CVE-2007-6256

...

CVE-2015-6256

CVE-2015-6256 affects Cisco ASR 5000 devices running software 19.0.M0.60828, where crafted length fields in OSPF packet headers can cause the OSPF process to restart, leading to a denial of service. The vulnerability stems from improper validation of OSPF header length fields in the device’s OSPF...

CVE-2014-6256

Zenoss Core through 5 Beta 3 permits an Authorization Bypass via a move action that lets remote attackers bypass access controls and place files in a directory with public (read or execute) permissions, i.e., ZEN-15386. Affected component is the Zenoss Core web/authorization logic related to file...

CVE-2008-6256

SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...