CVE-2019-7074

CVE-2019-7074 describes an out-of-bounds read in Adobe Acrobat and Reader for affected builds (2019.010.20069 and earlier; 2017.011.30113 and earlier; 2015.006.30464 and earlier). Successful exploitation could lead to information disclosure. The linked sources consistently list these versions as ...

Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)

The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...

Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PowerDNS Security Advisory 2016-04: Insufficient validation of TSIG signatures

Two issues have been found in PowerDNS Authoritative Server allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a...

CVE-2016-7074

CVE-2016-7074 affects PowerDNS (authoritative server and recursor): insufficient TSIG validation allows MITM to alter AXFR content due to missing check that the TSIG record is last, enabling parsing of records outside the TSIG scope. Affected: PowerDNS versions before 3.4.11/4.0.2 and recursor be...

CVE-2018-7074

HPE Intelligent Management Center PLAT 7.3 E0506P07 contains a stack-based buffer overflow in the tftpserver handling of the m_pkg_LimitSize parameter, allowing remote code execution with SYSTEM privileges. The issue can be exploited without authentication; successful exploitation could run arbit...

CVE-2017-7074

CVE-2017-7074 is an AppSandbox vulnerability affecting macOS versions before 10.13. The issue allowed a crafted application to trigger a denial of service through memory handling weaknesses in AppSandbox. Connected Apple advisory HT208144 confirms AppSandbox as the affected component and indicate...

CVE-2014-7074

CVE-2014-7074 entry is rejected/not used and does not represent an active vulnerability.

CVE-2014-7074

...

Fedora 24 : pdns (2017-bb0b9ddf27)

Update to 4.0.3 - Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073, CVE-2016-7074 Release notes 4.0.2: https://doc.powerdns.com/md/changelog/powerdns-authoritative-server-4 02 Release notes 4.0.3: https://doc.powerdns.com/md/changelog/powerdns-authoritative-server-4 03...

Fedora 25 : pdns (2017-cbd5501d31)

Update to 4.0.3 - Security fix for CVE-2016-2120, CVE-2016-7068, CVE-2016-7072, CVE-2016-7073, CVE-2016-7074 Release notes 4.0.2: https://doc.powerdns.com/md/changelog/powerdns-authoritative-server-4 02 Release notes 4.0.3: https://doc.powerdns.com/md/changelog/powerdns-authoritative-server-4 03...

Fedora Update for pdns FEDORA-2017-cbd5501d31

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-798-1 : pdns security update

Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2016-2120 Mathieu Lafon discovered that pdns does not properly validate records in zones. An authorized user can take...

[SECURITY] [DLA 798-1] pdns security update

Package : pdns Version : 3.1-4.1+deb7u3 CVE ID : CVE-2016-2120 CVE-2016-7068 CVE-2016-7072 CVE-2016-7073 CVE-2016-7074 Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems:...

Fedora Update for pdns-recursor FEDORA-2017-8308bc2a6e

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-201701-29] powerdns: multiple issues

Arch Linux Security Advisory ASA-201701-29 ========================================== Severity: Medium Date : 2017-01-19 CVE-ID : CVE-2016-2120 CVE-2016-7068 CVE-2016-7072 CVE-2016-7073 CVE-2016-7074 Package : powerdns Type : multiple issues Remote : Yes Link :...

openSUSE Security Update : pdns (openSUSE-2017-112)

This update for pdns fixes the following issues : - CVE-2016-2120: Crafted zone record could have caused a denial of service bsc1018329. - CVE-2016-7068: Crafted queries could have caused abnormal CPU usage bsc1018326. - CVE-2016-7072: Denial of service via the web server bsc1018327. -...

Debian DSA-3764-1 : pdns - security update

Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-2120 Mathieu Lafon discovered that pdns does not properly validate records in zones. An authorized user can take...

Debian Security Advisory DSA 3764-1 (pdns - security update)

Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-2120 Mathieu Lafon discovered that pdns does not properly validate records in zones. An authorized user can take advanta...