67 matches found
Fedora 30 : proftpd (2020-76c707cff0)
This update, to the current upstream stable release version, is a cumulative bug-fix release including a security fix for a use-after-free vulnerability CVE-2020-9273: successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. Not...
Fedora 31 : proftpd (2020-876b1f664e)
This update, to the current upstream stable release version, is a cumulative bug-fix release including a security fix for a use-after-free vulnerability CVE-2020-9273: successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. Not...
[SECURITY] [DSA 4635-1] proftpd-dfsg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4635-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 26, 2020 https://www.debian.org/security/faq -...
Debian: Security Advisory (DLA-2115-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2115-1] proftpd-dfsg security update
Package : proftpd-dfsg Version : 1.3.5e+r1.3.5-2+deb8u6 CVE ID : CVE-2020-9273 It was discovered that there was a a use-after-free vulnerability in in the proftpd-dfsg FTP server. Exploitation of this vulnerability within the memory pool handling could have allowed a remote attacker to execute...
CVE-2020-9273
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...
CVE-2020-9273
CVSS context: CVE-2020-9273 affects ProFTPD, where interrupting a data transfer can corrupt the memory pool, triggering a use-after-free in alloc_pool and potentially enabling remote code execution. What’s affected: ProFTPD (notably around 1.3.7-era releases per advisory) with a memory allocator ...
CVE-2019-17143
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2019-17143
CVE-2019-17143 affects Foxit PhantomPDF 9.6.0.25114. The root cause is a flaw in DWG file parsing where the code does not verify an object’s existence before operations, enabling information disclosure. Some sources note this could be combined with other vulnerabilities to achieve code execution ...
CVE-2019-17143
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2019-9273
CVE-2019-9273 is a local elevation-of-privilege vulnerability in the Android kernel’s synaptics_dsx_htc touchscreen driver, caused by an improper locking leading to a use-after-free. The issue could allow a privileged attacker to gain System execution rights without user interaction. Public detai...
CVE-2015-9273
creationtimestamp| type| source ---|---|--- 2018-10-07 20:25:08+00:00| seen| https://t.me/cibsecurity/556...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:0981-1)
This update for wireshark fixes the following issues : - Update to wireshark 2.2.14, fix such issues : - bsc1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6 - CVE-2018-9256: LWAPP dissector crash - CVE-2018-9260: IEEE 802.15.4 dissector crash - CVE-2018-9261: NBAP dissect...
Wireshark Multiple Denial of Service Vulnerabilities (Apr 2018) - Windows
Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-9273
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak...
CVE-2018-9273
CVE-2018-9273 is a memory-leak vulnerability in the PCP dissector (epan/dissectors/packet-pcp.c) of Wireshark. Affected products/versions per the provided docs: Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The issue is a memory leak in the PCP dissector, with no additional details on exploitation path...
CVE-2017-9273
The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes...
CVE-2017-9273
CVE-2017-9273 affects Identity Manager (IDM) 4.5, specifically the Bi-directional driver, prior to version 4.0.3.0. The vulnerability allows unauthorized changes to log configuration through the driver component, with network access, low attack complexity, and no authentication required. Impact i...