SUSE SLED12 Security Update : zziplib (SUSE-SU-2019:3341-1)

This update for zziplib fixes the following issues : Security issues fixed : CVE-2018-16548: Avoid a memory leak from zzipparserootdirectory which could lead to denial of service. bsc1107424 CVE-2018-7727: Fixed a memory leak in unzzipcat bsc1084515. Non-security issue fixed: Prevented division b...

CVE-2019-7727

In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restricting registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol by using the JMX connector. The observed affected TC...

CVE-2019-7727

CVE-2019-7727 affects NICE Engage (up to version 6.5) where the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces and does not restrict MBean registration. This enables remote code execution via the RMI protocol through the JMX connector. The observed vuln...

EulerOS 2.0 SP3 : zziplib (EulerOS-SA-2018-1397)

According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zziplib: out of bound read in mmapped.c:zzipdiskfread causes crash.CVE-2018-7725 - zziplib: Bus error in zip.c:zzipparserootdirectory cause cras...

Scientific Linux Security Update : zziplib on SL7.x x86_64 (20181030)

Security Fixes : - zziplib: out of bound read in mmapped.c:zzipdiskfread causes crash CVE-2018-7725 - zziplib: Bus error in zip.c:zzipparserootdirectory cause crash via crafted zip file CVE-2018-7726 - zziplib: Memory leak in memdisk.c:zzipmemdisknew can lead to denial of service via crafted zip...

Oracle Linux 7 : zziplib (ELSA-2018-3229)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3229 advisory. - 'Variable 'file' going out of scope leaks the storage it points to.' has been introduced by the original version of 0001-fix-CVE-2018-7725.patch - Fi...

zziplib security update

0.13.62-9 - Fix covscan warning - 'Variable 'file' going out of scope leaks the storage it points to.' has been introduced by the original version of 0001-fix-CVE-2018-7725.patch - Related: 1558596 0.13.62-8 - Fix CVE-2018-7727 - Resolves: 1558891 0.13.62-7 - Fix CVE-2018-7726 - Resolves: 1558623...

Fedora Update for zziplib FEDORA-2018-45183aab17

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-7727

ZZIPlib 0.13.68 contains a memory leak in zzip_mem_disk_new (memdisk.c) that can cause a denial of service. The issue affects zziplib up to version 0.13.68; advisories indicate upgrading to 0.13.69 or later fixes. Multiple CVEs (CVE-2018-7727, CVE-2018-7725, CVE-2018-7726) describe related DoS ve...

CVE-2017-7727

...

CVE-2017-7727

The connected sources identify CVE-2017-7727 as a Server-Side Request Forgery affecting the iSmartAlarm Backend. The vulnerability arises from an API endpoint that does not validate injection, enabling an attacker to use the backend as a proxy to perform SSRF/open redirection. Affected software i...

CVE-2016-7727

CVE-2016-7727 is rejected/not used per initial description; this entry does not represent an active vulnerability.

CVE-2016-7727

...

CVE-2015-7727

SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) is affected by CVE-2015-7727 due to multiple SQL injection vulnerabilities in the Web-based Development Workbench. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the (1) trace configuration page...

CVE-2014-7727

The Dj Brad H aka com.dreamstep.wDjBradH application 0.90 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7727

The CVE-2014-7727 entry concerns the Android application Dj Brad H (com.dreamstep.wDjBradH) version 0.90, which fails to verify X.509 certificates when establishing SSL connections. This certificate validation bypass enables potential man-in-the-middle attackers to spoof servers and steal or eave...

Memory corruption

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0368

Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allow remote attackers to 1 cause a denial of service CPU and memory consumption via a large number of open TCP connections to port 2000 and 2 cause a denial of service fill the Windows Service...

CVE-2006-0368

CVE-2006-0368 affects Cisco CallManager versions 3.2 and earlier; 3.3 before 3.3(5)SR1; 4.0 before 4.0(2a)SR2c; and 4.1 before 4.1(3)SR2. It enables remote attackers to cause denial of service by opening a large number of TCP connections to port 2000 (CPU/memory consumption) and to ports 2001, 20...