Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)

The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...

Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[slackware-security] irssi

New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-1.1.2-i586-1slack14.2.txz: Upgraded. This update addresses bugs including security and stability issues: A NULL...

Debian DSA-4162-1 : irssi - security update

Multiple vulnerabilities have been discovered in Irssi, a terminal-based IRC client which can result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4162. The text itself is copyright C...

Debian: Security Advisory (DLA-1289-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : irssi (2018-433d2dc3c7)

This is new version fixing multiple vulnerabilities: CVE-2018-7050, CVE-2018-7051, CVE-2018-7052, CVE-2018-7053, CVE-2018-7054. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 26 : irssi (2018-cbc52e8812)

This is new version fixing multiple vulnerabilities: CVE-2018-7050, CVE-2018-7051, CVE-2018-7052, CVE-2018-7053, CVE-2018-7054. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora Update for irssi FEDORA-2018-cbc52e8812

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1289-1 : irssi security update

It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client : - CVE-2018-7050: NULL pointer dereference for an 'empty' nick. - CVE-2018-7051: Certain nick names could result in out-of-bounds access when printing theme strings. - CVE-2018-7052: When the...

[SECURITY] [DLA 1289-1] irssi security update

Package : irssi Version : 0.8.15-5+deb7u5 CVE IDs : CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 Debian Bugs : 890676, 890677, 890678 It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client: - CVE-2018-7050: Null pointer dereference for an "empty" nick....

openSUSE Security Update : irssi (openSUSE-2018-171)

This update for irssi fixes the following security issues : - CVE-2018-7054: Use after free when server is disconnected during netsplits - CVE-2018-7053: Use after free when SASL messages are received in unexpected order - CVE-2018-7050: NULL pointer dereference when an 'empty' nick has been...

CVE-2018-7051

An out of bound read was found in Irssi, version 0.8.7 and later, when dealing with malformed theme strings. An attacker could trigger the vulnerability by using specific nick names that could potentially cause a crash in the application...

CVE-2018-7051

CVE-2018-7051 affects the IRC client Irssi . The issue exists in Irssi builds prior to 1.0.7 and prior to 1.1.1 (1.1.x) where certain nicknames can trigger an out‑of‑bounds access when printing theme strings. The connected documents describe it as an out‑of‑bounds read/access vulnerability withou...

CVE-2018-7051

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings...

About the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2017-7051

CVE-2017-7051 is a Bluetooth memory corruption vulnerability in macOS Sierra prior to 10.12.6. The issue could allow an attacker to execute arbitrary code in a privileged context or cause a denial of service via a crafted app. Apple’s 10.12.6/Security Update 2017-003 release addresses Bluetooth-r...

CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...