CVE-2014-7336

The CVE-2014-7336 entry concerns the Android app “Taking Your Company Public” (package biz.app4mobile.app_016e43d03ee54d1facd6c9532a00e724.app) version 1.28.44.441. The described vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-m...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0593-1)

libvirt was updated to fix various bugs and security issues : CVE-2013-7336: libvirt: unprivileged user can crash libvirtd during spice migration CVE-2013-6456: unsafe usage of paths under /proc/$PID/root Bugfixes for libvirt client killed on reboot shutdown. bnc852005 Also notify systemd when we...

Ubuntu: Security Advisory (USN-2209-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-7336

The qemuMigrationWaitForSpice function in qemu/qemumigration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service NULL pointer dereference and libvirtd crash by causing domblkstat to be called a...

CVE-2013-7336

CVE-2013-7336 affects libvirt in qemu migration flow. The qemuMigrationWaitForSpice function in qemu/qemu_migration.c fails to properly enter a monitor during seamless SPICE migration, enabling a local user to trigger a NULL pointer dereference and libvirtd crash by racing with qemuMonitorGetSpic...

libvirt拒绝服务漏洞(CVE-2013-7336)

BUGTRAQ ID: 66304 CVE ID: CVE-2013-7336 Libvirt库是一种实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 libvirt在实现上存在拒绝服务漏洞，攻击者可利用此漏洞造成受影响库崩溃。 0 libvirt 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://libvirt.org/index.html...

SuSE 11.2 Security Update : squid3 (SAT Patch Number 7336)

A denial of service problem in Squid3 initiated via invalid Content-Length headers and memory leaks has been fixed. CVE-2012-5643 / CVE-2013-0189, SQUID-2012:1 Also a logrotate permission issue has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2008-5949

creationtimestamp| type| source ---|---|--- 2008-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7336 2010-08-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14560...