29 matches found
CVE-2015-8860
The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive...
CVE-2015-8860
The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive...
CVE-2015-8860
CVE-2015-8860 affects the tar module used with Node.js, where a symlink attack in an archive could allow a local attacker to overwrite arbitrary files. The vulnerability exists in tar package versions before 2.0.0; successful exploitation requires handling of symbolic links during extraction. Rem...
UBUNTU-CVE-2016-8860
Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buft data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service client,...
CVE-2016-8860
Tor 0.2.8.9 and 0.2.9.x prior to 0.2.9.4-alpha are affected by a buffer termination bug in or/buffers.c where NUL termination on buf_t data is not guaranteed, enabling remote DoS via crafted data on client, hidden service, relay, or authority. Affected component: Tor core networking stack (Tor). ...
GLSA-201612-45 : Tor: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201612-45 Tor: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifier and change log referenced below for details. Impact : A remote attacker could possibly cause a Denial o...
Fedora Update for tor FEDORA-2016-59316cf667
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 23 : tor (2016-3b6393acdd)
update to upstream release 0.2.8.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...