101 matches found
Scientific Linux Security Update : tcpdump on SL7.x x86_64 (20170801)
The following packages have been upgraded to a later upstream version: tcpdump 4.9.0. Security Fixes : - Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send special...
RedHat Update for tcpdump RHSA-2017:1871-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (July 2017 CPU) (httpoxy)
The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Bouncy Castle Java library due to improper validation of a point within the elliptic curve. An...
CVE-2017-7940
The CVE-2017-7940 issue affects ImageWorsener 1.3.0, specifically the iw_read_gif_file function in imagew-gif.c of libimageworsener.a. A crafted GIF can cause memory exhaustion, enabling a remote attacker to consume available memory. Public references (Gentoo GLSA 201706-06 and CNVD/CVE replicas)...
SUSE SLES11 Security Update : tcpdump (SUSE-SU-2017:0656-1)
This update for tcpdump fixes the following issues: Security issues fixed bsc1020940 : - CVE-2016-7922: Corrected buffer overflow in AH parser print-ah.c:ahprint. - CVE-2016-7923: Corrected buffer overflow in ARP parser print-arp.c:arpprint. - CVE-2016-7925: Corrected buffer overflow in compresse...
ALPINE-CVE-2016-7940
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions...
CVE-2016-7940
CVE-2016-7940 affects tcpdump before 4.9.0, where the STP parser has a buffer overflow in print-stp.c/multiple functions. A crafted input could overflow a buffer and may allow arbitrary code execution or crash the application. The issue is addressed by upgrading tcpdump to version 4.9.0 or applyi...
CVE-2016-7940
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions...
CVE-2016-7940
The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions...
Important: Red Hat Security Advisory: Red Hat JBoss Fuse 6.3 security update
Red Hat JBoss Fuse 6.3, which fixes multiple security issues and includes several bug fixes and enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
Fedora 22 : bouncycastle-1.50-8.fc22 (2015-7d95466eda)
Security fix for CVE-2015-7940 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Mageia: Security Advisory (MGASA-2015-0487)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated bouncycastle packages fix security vulnerability
The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman ECDH key exchanges, aka an "invalid curve attack" CVE-2015-7940...
[SECURITY] [DSA 3417-1] bouncycastle security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3417-1 [email protected] https://www.debian.org/security/ Luciano Bello December 14, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DLA 361-1] bouncycastle security update
Package : bouncycastle Version : 1.44+dfsg-2+deb6u1 CVE ID : CVE-2015-7940 Debian Bug : 802671 The Bouncy Castle Java library before 1.51 does not validate that a point is within the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic...
DEBIAN-CVE-2015-7940
The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman ECDH key exchanges, aka an "invalid curve attack."...
CVE-2015-7940
CVE-2015-7940 (Bouncy Castle Java) : The library before 1.51 does not validate that an EC point lies on the curve, enabling an invalid-curve attack to potentially recover private keys during ECDH. Remote attackers could exploit crafted ECDH exchanges. Affected: Bouncy Castle JS, BC versions prior...
openSUSE: Security Advisory for bouncycastle (openSUSE-SU-2015:1911-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : bouncycastle (openSUSE-2015-705)
bouncycastle was updated to version 1.53 to fix one security issue. This security issue was fixed : - CVE-2015-7940: Invalid curve attack bsc951727. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
