Debian DSA-2622-1 : polarssl - several vulnerabilities

Multiple vulnerabilities have been found in PolarSSL. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2013-0169 A timing side channel attack has been found in CBC padding allowing an attacker to recover pieces of plaintext via statistical analysis of craft...

Debian Security Advisory DSA 2622-1 (polarssl - several vulnerabilities)

Multiple vulnerabilities have been found in PolarSSL. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2013-0169A timing side channel attack has been found in CBC padding allowing an attacker to recover pieces of plaintext via statistical analysis of crafted...

DSA-2622-1 polarssl - several

Bulletin has no description...

Debian: Security Advisory (DSA-2622-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1621

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169...

CVE-2013-1621

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169...

Code injection

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169...

CVE-2013-1621

Technical details about CVE-2013-1621 are not provided in the connected documents. The Initial Description notes an array-index error in PolarSSL’s SSL module and TLS CBC padding validation, but no specific versions, impact, vectors, or fixes are disclosed here.

CVE-2013-1621

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169...

CVE-2013-1621: Improper Input Validation

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169...

CVE-2013-0841

Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Code injection

Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2013-0841

Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2013-0841

Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2013-0841

CVE-2013-0841 is listed among multiple vulnerabilities affecting Google Chrome as of Feb 2013. The provided documents confirm Chrome/Chromium-wide issues (not limited to a single feature) with high risk, including the potential for denial of service and other unspecified impacts. The core descrip...

CVE-2013-0841

Removed by vendor...

CVE-2013-0841: Improper Input Validation

Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

PT-2013-2646

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 24.0.1312.56 Description The issue is related to an array index error in the content-blocking functionality. This could allow remote attackers to cause a denial of service or possibly have other unspecified...

net-snmp: Array index error, leading to out-of heap-based buffer read (snmpd crash)

Array index error in the handlensExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service out-of-bounds read and snmpd crash via an SNMP GET request for an entry not in the extension table...

RHEL 5 : net-snmp (RHSA-2013:0124)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0124 advisory. - net-snmp: Array index error, leading to out-of heap-based buffer read snmpd crash CVE-2012-2141 Note that Nessus has not tested for this issue but...