49 matches found
Debian DSA-4408-1 : liblivemedia - security update
Multiple security issues were discovered in liveMedia, a set of C++ libraries for multimedia streaming which could result in the execution of arbitrary code or denial of service when parsing a malformed RTSP stream. C Tenable Network Security, Inc. The descriptive text and package checks in this...
[SECURITY] [DSA 4408-1] liblivemedia security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4408-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2019 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-4408-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-1690-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : live555 (openSUSE-2019-58)
This update fixes two security issues in live555 : - CVE-2018-4013: Remote code execution vulnerability bsc1114779 - CVE-2019-6256: Denial of Service issue with RTSP-over-HTTP tunneling via x-sessioncookie HTTP headers boo1121892 This library is statically linked into VLC. However VLC is not...
openSUSE: Security Advisory for live555 (openSUSE-SU-2019:0058-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-6256
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...
CVE-2019-6256
LIVE555 Media Server libraries (liblivemedia) are affected by CVE-2019-6256. RTSP-over-HTTP tunneling enabled on liblivemedia servers can trigger an invalid function pointer dereference during error handling when two requests (GET and POST) with identical x-sessioncookie are sent in the same TCP ...
CVE-2019-6256
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmdTunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request...
CVE-2017-6256
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or potential escalation of...
CVE-2017-6256
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or potential escalation of...
CVE-2017-6256
NVIDIA Windows GPU Display Driver (nvlddmkm.sys) contains a vulnerability in the DxgkDdiEscape handler where a user-supplied value is used as an index into an array without proper validation, potentially leading to denial of service or privilege escalation. Documented as CVE-2017-6256, this affec...
CVE-2016-6256
SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity XXE attacks via crafted XML data in a request to B1iXcellerator/exec/soap/vP.001sap0003.inWCSX/com.sap.b1i.vplatform.runtime/INBWSCALLSYNCXPT/INBWSCALLSYNCXPT.ipo/proc, aka SAP Security Note 2378065...
CVE-2016-6256
SAP Business One for Android 1.2.3 is affected by CVE-2016-6256. A remote attacker can exploit an XML External Entity (XXE) vulnerability in the B1iXcellerator endpoint (paths including …INB_WS_CALL_SYNC_XPT/INB_WS_CALL_SYNC_XPT.ipo/proc) to access sensitive data, potentially cause DoS, or enable...
CVE-2013-6256
CVE-2013-6256 entry rejected; not associated with any vulnerability in 2013.
CVE-2012-6256
CVE-2012-6256 entry is rejected/not used and does not represent an active vulnerability.