CVE-2018-7159

CVE-2018-7159 affects the Node.js http-parser component: the HTTP parser ignores spaces in Content-Length, allowing Content-Length: 1 2 to be treated as 12. The risk is described as very low in the CVE entry, with exploitation considered difficult. Connected sources confirm this affects http-pars...

openSUSE Security Update : nodejs6 (openSUSE-2018-444)

This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...

openSUSE Security Update : nodejs4 (openSUSE-2018-375)

This update for nodejs4 fixes the following issues : - Fix some node-gyp permissions - New upstream maintenance 4.9.1 : - Security fixes : + CVE-2018-7158: Fix for 'path' module regular expression denial of service bsc1087459 + CVE-2018-7159: Reject spaces in HTTP Content-Length header values...

CVE-2017-7159

CVE-2017-7159 affects Apple macOS before 10.13.2, via the IOAcceleratorFamily component. The issue is a memory corruption vulnerability that could let an attacker run arbitrary code with system privileges or cause a denial of service through a crafted app. The vulnerability is tied to macOS High ...

[SECURITY] Fedora 27 Update: json-c-0.12.1-5.fc27

JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159...

[SECURITY] Fedora 26 Update: json-c-0.12.1-5.fc26

JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects. It aims to conform to RFC 7159...

CVE-2015-7159

...

CVE-2015-7159

The CVE-2015-7159 entry is rejected/not used and does not represent an active vulnerability entry.

Siemens S7 Client Detection

Binary data 7159.pasl...

Gentoo Security Advisory GLSA 201006-07 (silc-toolkit silc-client)

The remote host is missing updates announced in advisory GLSA 201006-07. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Mandriva Security Advisory MDVSA-2009:234-2 (silc-toolkit)

The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234-2. OpenVAS Vulnerability Test $Id: mdksa20092342.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:234-2 silc-toolkit Authors: Thomas Reinke Copyright: Copyright...

openSUSE 10 Security Update : silc-toolkit (silc-toolkit-6479)

This update of slic-toolkit fixes stack-based overflow while encoding a ASN.1 OID CVE-2008-7159 and several format string bugs CVE-2009-3051, CVE-2008-7160. The probability to exploit this issues to execute arbitrary code is high. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Mandrake Security Advisory MDVSA-2009:234-1 (silc-toolkit)

The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234-1. OpenVAS Vulnerability Test $Id: mdksa20092341.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:234-1 silc-toolkit Authors: Thomas Reinke Copyright: Copyright...

Mandrake Security Advisory MDVSA-2009:234 (silc-toolkit)

The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234. OpenVAS Vulnerability Test $Id: mdksa2009234.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:234 silc-toolkit Authors: Thomas Reinke Copyright: Copyright c 20...

Mandrake Security Advisory MDVSA-2009:234 (silc-toolkit)

The remote host is missing an update to silc-toolkit announced via advisory MDVSA-2009:234. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE Security Update : silc-toolkit (silc-toolkit-1280)

This update of slic-toolkit fixes stack-based overflow while encoding a ASN.1 OID CVE-2008-7159 and several format string bugs CVE-2009-3051, CVE-2008-7160. The probability to exploit this issues to execute arbitrary code is high. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

openSUSE Security Update : silc-toolkit (silc-toolkit-1280)

This update of slic-toolkit fixes stack-based overflow while encoding a ASN.1 OID CVE-2008-7159 and several format string bugs CVE-2009-3051, CVE-2008-7160. The probability to exploit this issues to execute arbitrary code is high. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Debian: Security Advisory (DSA-1879-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-7159

CVE-2006-7159 affects BTI-Tracker 1.3.2 (btitracker). A directory traversal in include/prune_torrents.php via the TORRENTSDIR parameter in a prune action allows remote attackers to delete arbitrary files. This is a file-system traversal vulnerability (no authentication required per the descriptio...