Updated nss packages fix security vulnerability

A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library CVE-2017-7502...

MGASA-2017-0160 Updated nss packages fix security vulnerability

A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library CVE-2017-7502...

CentOS 7 : nss (CESA-2017:1365)

An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CentOS 6 : nss (CESA-2017:1364)

An update for nss is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

nss security update

CentOS Errata and Security Advisory CESA-2017:1364 An update for nss is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 6 : nss (RHSA-2017:1364)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1364 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...

CVE-2017-7502

CVE-2017-7502 is a NULL pointer dereference in Mozilla NSS when the server receives empty SSLv2 messages, enabling denial of service. Connected documents confirm NSS-related impact and multiple vendor advisories (IBM PowerKVM, IBM FlashSystem V840, IBM Security Directory Suite, Debian DSA-3872-1,...

CVE-2017-7502

A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library...

RedHat Update for nss RHSA-2017:1364-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

CVE-2016-7502

CVE-2016-7502 affects FFmpeg prior to 3.1.4. The vulnerability lies in the function cavs_idct8_add_c (libavcodec/cavsdsp.c), which can read out-of-bounds memory when decoding with cavs_decode. This could impact systems processing certain cavs-video streams, with potential effects on confidentiali...

CVE-2016-7502

The cavsidct8addc function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavsdecode...

openSUSE Security Update : ffmpeg (openSUSE-2016-1203)

This update for ffmpeg fixes multiple security issues in ffmpeg boo1003806 These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution. - CVE-2016-7562: out-of-bounds...

CVE-2015-7502

Summary: CVE-2015-7502 affects Red Hat CloudForms Management Engine (CFME) 3.2/5.4.4 and CFME 4.0/5.5.0. The issue is improper encryption of data stored in the backend PostgreSQL database, enabling local attackers to access sensitive information by exploiting access to database exports or log fil...

CVE-2015-7502

Red Hat CloudForms 3.2 Management Engine CFME 5.4.4 and CloudForms 4.0 Management Engine CFME 5.5.0 do not properly encrypt data in the backend PostgreSQL database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to 1 database exports o...

CVE-2014-7502

The CVE-2014-7502 entry describes an Android app issue: Escucha elDiario.es (aka es.lacabradev.escuchaeldiario) 1.2.3 does not verify X.509 SSL certificates, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is missing SSL certificate ...

SuSE 10 Security Update : postfix (ZYPP Patch Number 7502)

Remote attackers could have potentially exploited a memory corruption issue in postfix' SASL implementation to execute arbitrary code CVE-2011-1720. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...