63 matches found
K23412152: libidn vulnerability CVE-2016-6261
Security Advisory Description The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via 64 bytes of input. CVE-2016-6261 Impact This vulnerability may allow attackers to cause a denial of service...
Mageia: Security Advisory (MGASA-2016-0269)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advisory ROSA-SA-2021-1873
Software: libidn 1.28 OS: Cobalt 7.9 CVE-ID: CVE-2015-2059 CVE-Crit: MEDIUM CVE-DESC: The stringpreputf8toucs4 function in libin prior to 1.31, used in jabberd2, allows context-sensitive attackers to read system memory and possibly exert other undefined influence via invalid UTF-8 characters in a...
SUSE: Security Advisory (SUSE-SU-2016:2079-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-6261
SAP Solution Manager (Trace Analysis) 7.20 is affected. The issue allows log injection into the trace file due to incomplete XML validation, impairing readability of trace files. No explicit remediation or patch version is provided in the connected documents. References point to SAP notes/wiki en...
EulerOS 2.0 SP2 : libidn (EulerOS-SA-2019-1851)
According to the version of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read an...
CVE-2017-6261
creationtimestamp| type| source ---|---|--- 2019-06-05 19:36:09+00:00| seen| https://t.me/cibsecurity/4704...
CVE-2017-6261
The CVE affects NVIDIA Vibrante Linux, specifically versions 1.1, 2.0, and 2.2, where a vulnerability in the user-space driver stems from insufficient protection mechanisms. This could lead to denial of service or information disclosure. The connected documents confirm the affected product/versio...
Joomla! < 3.9.2 Multiple Vulnerabilities
Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...
CVE-2019-6261
An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in comcontact leads to a stored XSS vulnerability...
CVE-2019-6261
CVE-2019-6261 concerns Joomla! prior to 3.9.2, with a stored XSS flaw in com_contact due to inadequate escaping. The issue is documented as a stored cross-site scripting vulnerability that can impact confidentiality and integrity (per CVSS). Affected component: com_contact (and related reports ac...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-24779 Potential Impact: Information disclosure, denial of service, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6257, CVE-2018-6258, CVE-2018-6259, CVE‑2018‑6261, CVE‑2018‑6262 Summary Description: NVIDIA has released a...
CVE-2018-6261
NVIDIA GeForce Experience vulnerability CVE-2018-6261 affects GeForce Experience prior to 3.15 when GameStream is enabled. The issue involves improper file permissions set on a file, which may allow code execution, denial of service, or privilege escalation by users with system access. Affected p...
Security Bulletin: NVIDIA GeForce Experience - September 2018
NVIDIA has released a software update to address potential security vulnerabilities in GeForce Experience. When GameStream is enabled and an unauthorized user gains system access, these issues may lead to limited user information disclosure, denial of service, or escalation of privileges. To...
Security fix for the ALT Linux 9 package glibc version 6:2.26.9000.0.1248.407552c-alt1
Jan. 30, 2018 Dmitry V. Levin 6:2.26.9000.0.1248.407552c-alt1 - Updated to glibc-2.26.9000-1248-g407552c closes: 26977. - Switched IDNA implementation to libidn2 by Florian Weimer; fixes: CVE-2016-6261, CVE-2016-6263, CVE-2017-14062...
CVE-2012-6261
This CVE entry is rejected/not used and does not represent an active vulnerability.
USN-3068-1 Libidn vulnerabilities | Cloud Foundry
USN-3068-1 Libidn vulnerabilities Medium Vendor Canonical Ubuntu, libidn Versions Affected Canonical Ubuntu 14.04 LTS Description Thijs Alkemade, Gustavo Grieco, Daniel Stenberg, and Nikos Mavrogiannopoulos discovered that Libidn incorrectly handled invalid UTF-8 characters. A remote attacker cou...
SUSE SLES11 Security Update : libidn (SUSE-SU-2016:2291-1)
This update for libidn fixes the following issues : - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 ...