38618 matches found
EulerOS 2.0 SP3 : tar (EulerOS-SA-2019-2673)
According to the version of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended...
EulerOS 2.0 SP3 : libXvMC (EulerOS-SA-2019-2628)
According to the version of the libXvMC package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string.CVE-2016-7953 Note that...
EulerOS 2.0 SP3 : icu (EulerOS-SA-2019-2594)
According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to t...
EulerOS 2.0 SP3 : lcms2 (EulerOS-SA-2019-2601)
According to the version of the lcms2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a denial of service v...
EulerOS 2.0 SP3 : pcsc-lite (EulerOS-SA-2019-2647)
According to the version of the pcsc-lite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses...
EulerOS 2.0 SP3 : sqlite (EulerOS-SA-2019-2664)
According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - osunix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive...
EulerOS 2.0 SP3 : shadow-utils (EulerOS-SA-2019-2662)
According to the version of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.CVE-2016-6252 Note that Tenable Network...
EulerOS 2.0 SP3 : openslp (EulerOS-SA-2019-2641)
According to the versions of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via ...
EulerOS 2.0 SP3 : ntp (EulerOS-SA-2019-2637)
According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by...
EulerOS 2.0 SP3 : libxslt (EulerOS-SA-2019-2627)
According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to caus...
EulerOS 2.0 SP3 : jansson (EulerOS-SA-2019-2597)
According to the version of the jansson package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JS...
EulerOS 2.0 SP3 : libwmf (EulerOS-SA-2019-2623)
According to the version of the libwmf packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The wmfmalloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service application crash via a crafted wmf file,...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Sterling Secure Proxy (CVE-2016-3426, CVE-2016-3485)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 7.0 that is used by IBM Sterling Secure Proxy. These issues were disclosed as part of the IBM Java Runtime updates in April 2016 and July 2016. Vulnerability Details CVEID: CVE-2016-3426...
Security Bulletin: Vulnerability in Apache Commons FileUpload Affects IBM Sterling Secure Proxy
Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by IBM Sterling Secure Proxy. Vulnerability Details CVEID: CVE-2016-1000031 DESCRIPTION: Apache Commons FileUpload, as used in Novell NetIQ Sentinel and other products, could allow a remote...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Sterling Secure Proxy (CVE-2015-7575, CVE-2016-0475, CVE-2015-4872, CVE-2015-5006)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 7.0 that is used by IBM Sterling Secure Proxy. These issues were disclosed as part of the IBM Java Runtime updates in October 2015 and January 2016 and include the vulnerability commonly...
Security Bulletin: Vulnerability in Apache Commons FileUpload affects IBM Sterling Secure Proxy (CVE-2016-3092)
Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by IBM Sterling Secure Proxy. Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Sterling External Authentication Server (CVE-2016-3426, CVE-2016-3485)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 7.0 that is used by IBM Sterling External Authentication Server. These issues were disclosed as part of the IBM Java Runtime updates in April 2016 and July 2016. Vulnerability Details CVEID:...
Security Bulletin: Java DLL planting vulnerability affects IBM Sterling Secure Proxy (CVE-2016-2542)
Summary Flexera InstallAnywhere generates installation executables which are vulnerable to a DLL-planting vulnerability during installs on Windows systems. InstallAnywhere is used by IBM Sterling Secure Proxy. Vulnerability Details CVEID: CVE-2016-2542 DESCRIPTION: Flexera InstallShield could all...
Security Bulletin: Vulnerability in Apache Commons Fileupload affects IBM Control Center (CVE-2016-3092)
Summary Apache Commons Fileupload vulnerability affects IBM Control Center. Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file upload requests, an attacker could...
Security Bulletin: Multiple vulnerabilities in IBM WebSphere affect IBM Control Center (CVE-2016-5983, CVE-2016-2923, CVE-2016-3092)
Summary IBM WebSphere Application Server is shipped as a component of IBM Control Center. Multiple vulnerabilities have been addressed. Vulnerability Details CVEID: CVE-2016-5983 DESCRIPTION: IBM WebSphere Application Server could allow remote attackers to execute arbitrary Java code with a...