63 matches found
SUSE-SU-2016:2291-1 Security update for libidn
This update for libidn fixes the following issues: - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 -...
CVE-2016-6261
The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via 64 bytes of input...
CVE-2016-6261
The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via 64 bytes of input...
CVE-2016-6261
CVE-2016-6261 affects libidn: the idna_to_ascii_4i function in lib/idna.c within libidn before 1.33 allows context-dependent attackers to cause a denial of service via 64 bytes of input (out-of-bounds read and crash). Connected advisories indicate patches/mitigations exist (upgrading libidn to a ...
SUSE SLED12 / SLES12 Security Update : libidn (SUSE-SU-2016:2079-1)
This update for libidn fixes the following issues : - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 ...
[SECURITY] [DSA 3658-1] libidn security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3658-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2016 https://www.debian.org/security/faq -...
Ubuntu 14.04 LTS / 16.04 LTS : Libidn vulnerabilities (USN-3068-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3068-1 advisory. Thijs Alkemade, Gustavo Grieco, Daniel Stenberg, and Nikos Mavrogiannopoulos discovered that Libidn incorrectly handled invalid UTF-8...
SUSE-SU-2016:2079-1 Security update for libidn
This update for libidn fixes the following issues: - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 -...
Debian DLA-582-1 : libidn security update
Multiple vulnerabilities have been discovered in libidn. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-8948 When idn is reading one zero byte as input an out-of-bounds-read occurred. CVE-2016-6261 An out-of-bounds stack read is exploitable in...
Fedora Update for libidn FEDORA-2016-42514bee97
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated libidn packages fix security vulnerability
Out-of-bounds stack read in libidn before 1.33 in idnatoascii4i CVE-2016-6261. Out-of-bounds-read in libidn when reading one zero byte as input CVE-2015-8948, CVE-2016-6262. In libidn before 1.33, stringpreputf8nfkcnormalize would crash when presented with invalid UTF-8 CVE-2016-6263...
MGASA-2016-0269 Updated libidn packages fix security vulnerability
Out-of-bounds stack read in libidn before 1.33 in idnatoascii4i CVE-2016-6261. Out-of-bounds-read in libidn when reading one zero byte as input CVE-2015-8948, CVE-2016-6262. In libidn before 1.33, stringpreputf8nfkcnormalize would crash when presented with invalid UTF-8 CVE-2016-6263...
Fedora 24 : libidn (2016-42514bee97)
Security fix for CVE-2016-6263, CVE-2015-8948, CVE-2016-6262, CVE-2016-6261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2016-6261
The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via 64 bytes of input...
CVE-2015-6261
Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictions and read configuration files by leveraging the Mobile and Remote Access MRA role and establishing a TFTP session, aka Bug ID CSCuv78531...
CVE-2015-6261
Cisco TelePresence Video Communication Server Expressway X8.5.2 contains CVE-2015-6261: remote authenticated users with the Mobile and Remote Access (MRA) role can bypass access controls and read configuration files by initiating a TFTP session. Root cause is lack of TFTP authentication/controls ...
CVE-2014-6261
Mode C: The CVE-2014-6261 issue affects Zenoss Core up to 5 Beta 3, where the Check For Updates feature allows remote code execution via unpickling of potentially unsafe Python objects during version checks (via spoofed callhome server or visiting a crafted site). The vulnerability arises in the ...
Fedora Core 11 FEDORA-2009-6261 (apr-util)
The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6261. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
CVE-2008-6261
CVE-2008-6261 corresponds to an SQL injection vulnerability in view.php of E-topbiz AdManager 4, exploitable via the group parameter to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD, CVE listings, and related references) with a consistent description, but th...
