31 matches found
Fedora 22 : libsndfile (2015-0be7a2e1b8)
The remote Fedora 22 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-0be7a2e1b8 advisory. fix CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header Tenable has extracted the preceding description...
SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-2)
The libsndfile package was updated to fix the following security issue : - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519. Note that Tenabl...
SUSE-SU-2015:2000-2 Security update for libsndfile
The libsndfile package was updated to fix the following security issue: - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519...
openSUSE Security Update : libsndfile (openSUSE-2015-820)
The libsndfile package was updated to fix the following security issue : - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519. %NASLMINLEVEL...
openSUSE Security Update : libsndfile (openSUSE-2015-742)
The libsndfile package was updated to fix three security issues : - CVE-2015-7805: fix for heap overflow via specially crafted AIFF header bsc953516 - CVE-2015-8075: fix for out of bounds read access in function psfstrlcpycrlf bsc953519 - CVE-2014-9756: fix a divide-by-zero issue that can lead to...
SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2015:2000-1)
The libsndfile package was updated to fix the following security issue : - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519. Note that Tenabl...
CVE-2015-8075
CVE-2015-8075 relates to libsndfile and a heap overflow issue. The connected advisories indicate this vulnerability is addressed in vendor updates (e.g., SUSE SUSE-SU-2015:2000-2 and Fedora package updates for libsndfile), with CVE-2015-8075 listed alongside other libsndfile issues. The RHEL advi...
CVE-2014-8075
The CVE-2014-8075 entry covers a Cross-site scripting (XSS) vulnerability in the Drupal Tribune module (versions 6.x-1.x and 7.x-3.x). The root cause is insufficient filtering of user-provided text from Tribune node titles, allowing remote authenticated users with certain permissions to inject ar...
CVE-2014-8075
Cross-site scripting XSS vulnerability in the Tribune module 6.x-1.x and 7.x-3.x for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a node title...
SA-CONTRIB-2014-008 - Tribune - Cross Site Scripting (XSS)
A tribune is a type of chatroom. The module doesn't sufficiently filter user provided text from Tribune node titles. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create a Tribune node. CVE identifiers issued CVE-2014-8075 Versions affected...
