[SECURITY] [DSA 3187-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3187-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 15, 2015 http://www.debian.org/security/faq -...

Ubuntu: Security Advisory (USN-2522-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS : icu regression (USN-2522-2)

USN-2522-1 fixed vulnerabilities in ICU. On Ubuntu 12.04 LTS, the font patches caused a regression when using LibreOffice Calc. The patches have been temporarily backed out until the regression is investigated. We apologize for the inconvenience. It was discovered that ICU incorrectly handled...

[USN-2522-1] ICU vulnerabilities

========================================================================== Ubuntu Security Notice USN-2522-1 March 05, 2015 icu vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubunt...

openSUSE: Security Advisory for chromium (openSUSE-SU-2015:0441-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : chromium-browser (RHSA-2015:0093)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0093 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2476-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2476-1 advisory. Several memory corruption bugs were discovered in ICU. If a user were tricked in to opening a specially crafted website, an attacker could potentially...

CVE-2014-7940

The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...

CVE-2014-7940

CVE-2014-7940 affects ICU 52 and derived Chrome builds; the collator in i18n/ucol.cpp does not initialize memory for a data structure, enabling denial of service or unspecified impact via crafted input. Public-module details: linked advisories show remediation by upgrading ICU to newer releases (...

CVE-2014-7940

The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...

SuSE 11.3 Security Update : xorg-x11-libXt (SAT Patch Number 7940)

This update of xorg-x11-libXt fixes several integer and buffer overflow issues. Bug 815451/821670 CVE-2013-2002 / CVE-2013-2005 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...

CVE-2009-0458

creationtimestamp| type| source ---|---|--- 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7941 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7940...

CVE-2009-0459

creationtimestamp| type| source ---|---|--- 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7941 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7940...

CVE-2008-0530: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute arbitrary code via a crafted DNS response...

CVE-2008-0531: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message...

CVE-2008-0528: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data...

CVE-2008-0526: Improper Input Validation

Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service reboot via a long ICMP echo request ping packet...

CVE-2007-5583

Cisco IP Phone 7940 with firmware P0S3-08-7-00 is affected by CVE-2007-5583, a denial-of-service vulnerability caused by a sequence of SIP INVITE transactions where the Request-URI lacks a user name. Remote attackers can trigger 486 Busy responses or a device reboot. The vulnerability is document...

CVE-2007-5583: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service "486 Busy" responses or device reboot via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459...

Cisco 7940 SIP电话INVITE消息远程拒绝服务漏洞

BUGTRAQ ID: 26711 Cisco 7940型IP电话是一种多功能通讯设备，通过IP网络传递语音信号。 Cisco 7940在处理畸形INVITE消息时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果向Cisco 7940 IP电话发送了一系列SIP INVITE消息的话，就可能导致设备看起来在正常工作而实际上无法接收或发起呼叫，继续发送INVITE消息的话就会导致设备重启。 攻击者所发送的SIP INVITE消息中的Request-URI部分应不包含有用户名，如INVITE sip:XXX.XXX.XXX.XXX...