Security Advisory - Two JSON Injection Vulnerabilities in Some Huawei Servers

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have two JSON injection vulnerabilities due to insufficient input validation. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Successful exploit may allow attackers t...

CVE-2017-17222

Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...

Remote code execution

Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient...

CVE-2017-17221

CVE-2017-17221 affects Huawei eSpace devices (7950 V200R003C30 and 8950 V200R003C00; V200R003C30). The issue is a remote code execution vulnerability in the Import Signal Tone function triggered after a signal tone is uploaded, caused by insufficient verification of received packets. An authentic...

CVE-2017-17223

Huawei eSpace 7910, 7950, and 8950 devices (V200R003C30/0: eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00/0; V200R003C30) are affected by a directory traversal vulnerability. An authenticated, remote attacker can craft a specific URL, exploiting insufficient URL verific...

CVE-2017-17222

Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...

Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability (CNVD-2018-02550)

Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...

Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability

Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...

Nitro Pro Denial-of-Service and Code Execution Vulnerabilities - Windows

Nitro Pro is prone to denial of service DoS and code execution vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nitro Pro PDF - Multiple Vulnerabilities

Nitro Pro PDF - Multiple Vulnerabilities Vulnerabilities Summary The following advisory describes three vulnerabilities found in Nitro / Nitro Pro PDF. Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you chan...

CVE-2017-7950

CVE-2017-7950 affects Nitro Pro 11.0.3 and earlier. A crafted PCX file can cause an application crash (DoS) when Nitro Pro processes the file. Multiple sources (NVD/NV exploits) corroborate the DoS vector; some OpenVAS entries note related vulnerabilities in Nitro Pro. The public documents do not...

GLSA-201704-03 : X.Org: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201704-03 X.Org: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org server and libraries. Please review the CVE identifiers referenced below for details. Impact : A local or remote users can utilize th...

SUSE SLES11 Security Update : xorg-x11-libXrender (SUSE-SU-2016:3115-1)

This update for xorg-x11-libXrender fixes the following issues : - insufficient validation of data from the X server can cause out of boundary memory writes bsc1003002, CVE-2016-7949, CVE-2016-7950 Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2016-7950

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths...

BELL-CVE-2016-7950 CVE-2016-7950 does not affect BellSoft software

Bulletin has no description...

CVE-2016-7950

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths...

CVE-2016-7950

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths...

CVE-2016-7950

CVE-2016-7950 concerns X.org libXrender prior to 0.9.10. The vulnerability allows a remote X server to trigger out-of-bounds writes via vectors involving filter name lengths in XRenderQueryFilters. Connected advisories and Nessus plugins corroborate the issue across multiple Linux/RHEL/AArch conf...

openSUSE Security Update : libXrender (openSUSE-2016-1421)

This update of libXrender fixes the following issues : - insufficient validation of data from the X server could cause out of boundary memory writes boo1003002, CVE-2016-7949, CVE-2016-7950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SUSE SLED12 / SLES12 Security Update : X Window System client libraries (SUSE-SU-2016:2828-1)

This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission...