SOL15364328 - Apache vulnerabilities CVE-2012-5783, CVE-2012-6153, and CVE-2014-3577

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

SUSE SLED11 / SLES11 Security Update : mono-core (SUSE-SU-2016:0257-1)

mono-core was updated to fix the following vulnerabilities : - CVE-2009-0689: Remote attackers could cause a denial of service and possibly arbitrary code execution through the string-to-double parser implementation bsc958097 - CVE-2012-3543: Remote attackers could cause a denial of service throu...

ISC BIND DNS RDATA Handling Remote DoS Vulnerability (Jan 2016)

ISC BIND is prone to a remote denial of service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

ISC BIND DNS64 Remote Denial of Service Vulnerability (Jan 2016)

ISC BIND is prone to a remote denial of service vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind";...

F5 Networks BIG-IP : BIND vulnerability (SOL14601)

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record. C Tenable...

[SECURITY] [DLA 400-1] pound security update

Package : pound Version : 2.6-1+deb6u1 CVE ID : CVE-2009-3555 CVE-2011-3389 CVE-2012-4929 CVE-2014-3566 This update fixes certain known vulnerabilities in pound in squeeze-lts by backporting the version in wheezy. CVE-2009-3555 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 security update

An update for Red Hat JBoss Web Server 2.1.0 that fixes four security issues is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

openSUSE Security Update : xfsprogs (openSUSE-2016-8)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

GLSA-201512-13 : InspIRCd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201512-13 InspIRCd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in InspIRCd. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary co...

SUSE SLED11 / SLES11 Security Update : xfsprogs (SUSE-SU-2015:2383-1)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 - Fix segfault during xfsrepair run bsc911866 - Fix definition of leaf attribute block to avoid gcc optimization xfsprogs-fix-leaf-block-definition No...

SUSE SLED12 / SLES12 Security Update : xfsprogs (SUSE-SU-2015:2384-1)

xfsprogs was updated to fix one security vulnerability and several bugs. - Handle unwanted data disclosure in xfsmetadump bsc939367, CVE-2012-2150 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

[SECURITY] [DLA 375-1] libpng security update

Package : libpng Version : 1.2.44-1+squeeze6 CVE ID : CVE-2012-3425 CVE-2015-8472 CVE-2015-8540 CVE-2015-8472 update incomplete patch for CVE-2015-8126 CVE-2015-8540 underflow read in pngcheckkeyword in pngwutil.c CVE-2012-3425 The pngpushreadzTXt function in pngpread.c in libpng 1.0.x before...

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.3

6:2.11.3-alt8.M60P.3 built Dec. 23, 2015 Dmitry V. Levin in task 155253 Dec. 23, 2015 Dmitry V. Levin - Backported upstream fixes for sw15330/CVE-2013-1914, sw14699/CVE-2013-4237, sw1585567/CVE-2013-4332, sw14134/CVE-2012-6656, sw17325/CVE-2014-6040, sw14547/CVE-2012-4412,4424...

Debian DLA-362-1 : dhcpcd security update

Guido Vranken discovered several memory-related vulnerabilities while fuzzing DHCP messages sent to dhcpcd. For Debian 6 'Squeeze', those issues have been fixed in version 1:3.2.3-5+squeeze2. CVE-2012-6698 Out-of-bounds write with specially crafted DHCP messages. CVE-2012-6699 Out-of-bounds read...

[SECURITY] [DLA 362-1] dhcpcd security update

Package : dhcpcd Version : 1:3.2.3-5+squeeze2 CVE ID : CVE-2012-6698 CVE-2012-6699 CVE-2012-6700 Guido Vranken discovered several memory-related vulnerabilities while fuzzing DHCP messages sent to dhcpcd. For Debian 6 “Squeeze”, those issues have been fixed in version 1:3.2.3-5+squeeze2...

CentOS 7 : xfsprogs (CESA-2015:2151)

Updated xfsprogs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

xfsprogs security update

CentOS Errata and Security Advisory CESA-2015:2151 Updated xfsprogs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerabili...

Debian DLA-350-1 : eglibc security update

The strxfrm function is vulnerable to integer overflows when computing memory allocation sizes similar to CVE-2012-4412. Furthermore since it fallbacks to use alloca when malloc fails, it is vulnerable to stack-based buffer overflows similar to CVE-2012-4424. Those issues have been fixed in Debia...

Oracle Linux 7 : xfsprogs (ELSA-2015-2151)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2151 advisory. - Fix xfsmetadump disclosure flaw, CVE-2012-2150 1251118 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle: Security Advisory (ELSA-2015-2151)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...