gnutls security update

CentOS Errata and Security Advisory CESA-2014:0594 Updated gnutls packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS bas...

Scientific Linux Security Update : libtasn1 on SL6.x i386/x86_64 (20140603)

It was discovered that the asn1getbitder function of the libtasn1 library incorrectly reported the length of ASN.1-encoded data. Specially crafted ASN.1 input could cause an application using libtasn1 to perform an out-of-bounds access operation, causing the application to crash or, possibly,...

RHEL 6 : libtasn1 (RHSA-2014:0596)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0596 advisory. The libtasn1 library provides Abstract Syntax Notation One ASN.1 parsing and structures management, and Distinguished Encoding Rules DER...

SUSE-SU-2015:0675-1 Security update for gnutls

GnuTLS has been patched to ensure proper parsing of session ids during the TLS/SSL handshake. Additionally, three issues inherited from libtasn1 have been fixed. Further information is available at http://www.gnutls.org/security.htmlGNUTLS-SA-2014-3 These security issues have been fixed: Possible...

Moderate: Red Hat Security Advisory: libtasn1 security update

Updated libtasn1 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Updated libtasn1 packages fix CVE-2014-3467-9

Updated libtasn1 packages fix security vulnerabilities: Multiple buffer boundary check issues were discovered in libtasn1 library, causing it to read beyond the boundary of an allocated buffer. An untrusted ASN.1 input could cause an application using the library to crash CVE-2014-3467. It was...

Vortex Media Group Light Alloy M3U File Handling Buffer Overflow (CVE-2013-6874)

A stack buffer overflow vulnerability has been reported in Light Alloy media player. The vulnerability is due to a lack of boundary check when handling M3U files. Successful exploitation could allow arbitrary code execution in the context of the target user...

Microsoft Windows MSCOMCTL.OCX ActiveX Control Remote Code Execution - Ver2 (CVE-2012-0158)

A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to insufficient boundary check in the MSCOMCTL ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Nagios core CGI Process_cgivars Off-By-One (CVE-2013-7108)

There exists an Off-By-One flaw in Nagios Core. The problem is caused by improper boundary check when validating the parameters passed to the application. A remote authenticated attacker could exploit this vulnerability by sending a request with a crafted long parameter value resulting in the CGI...

Adobe Reader And Acrobat PDF Memory Corruption (CVE-2009-1859)

A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to insufficient boundary check when parsing the COD tag of an embedded JP2 file. A remote attacker can exploit this weakness by enticing the host to open a specially crafted PDF file with an...

Scada Engine BACnet OPC Client SCADA Remote Code Execution (CVE-2010-4740)

A buffer overflow vulnerability has been reported in SCADA Engine's BACnet OPC Client. The vulnerability is due to a boundary check error. A remote attacker may exploit this issue by sending specially crafted malicious file to be opened using the affected product. Successful exploitation could...

Oracle Linux 3 / 4 : ghostscript (ELSA-2009-0420)

From Red Hat Security Advisory 2009:0420 : Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software...

Citadel SMTP RCPT Remote Buffer Overflow - High Confidence (CVE-2008-0394)

The Citadel Server is a mail server product geared towards small and medium size organizations. The product implements POP3, IMAP4, and SMTP services. The SMTP server module is installed and started in a default installation. There exists a buffer overflow vulnerability in Citadel SMTP Server. Th...

Amlibweb NetOpacs webquery.dll Stack Buffer Overflow

A stack based buffer overflow vulnerability has been reported in Amlib NetOPAC. The vulnerability is due to a failure to perform adequate boundary check on user supplied input. A remote attacker can exploit this vulnerability by sending a specially crafted request to the server...

Apple Mac OS X CoreText相关越界内存读取写入漏洞(CVE-2012-3716)

BUGTRAQ ID: 55623 CVE ID: CVE-2012-3716 Apple Mac OS X是苹果电脑操作系统软件。 使用CoreText的Apple Mac OS X处理文本字形时存在边界检查漏洞，可导致越界读取和写入，造成应用终止或执行任意代码。 0 Apple Macintosh OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（APPLE-SA-2012-09-19-2）以及相应补丁: APPLE-SA-2012-09-19-2：OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - A buffer overflow flaw was found in the loadmixervolumes function in the Linux kernel's Open Sound System OSS sound driver. On 64-bit PowerPC systems, a local, unprivileged user could use this flaw to cause a denial of service or escalate their...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - A missing boundary check was found in the dvbcaioctl function in the Linux kernel's av7110 module. On systems that use old DVB cards that require the av7110 module, a local, unprivileged user could use this flaw to cause a denial of service or...

CentOS Update for kernel CESA-2011:0429 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for kernel CESA-2011:0429 centos5 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2011:0429 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for kernel CESA-2012:0007 centos5

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2012:0007 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...