EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification...

EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1269)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the toolmsgs.c:voutf function that may result i...

EulerOS Virtualization 2.5.4 : curl (EulerOS-SA-2019-1237)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremkntha...

EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1240)

According to the version of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremkntha...

Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities

Summary IBM Event Streams has addressed the following vulnerabilities in the shipped cURL libraries. Vulnerability Details CVEID: CVE-2018-16890 DESCRIPTION: cURL libcurl could allow a remote attacker to obtain sensitive information. The function handling incoming NTLM type-2 messages fails to...

openSUSE Security Update : curl (openSUSE-2019-694)

This update for curl fixes the following issues : This security issue was fixed : - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed : - Use OPENSSLconfig instead of CONFmodulesloadfile to avoid crashes due to openssl engines...

openSUSE Security Update : libzypp / zypper (openSUSE-2019-685)

This update for libzypp, zypper, libsolv provides the following fixes : Security fixes in libzypp : - CVE-2018-7685: PackageProvider: Validate RPMs before caching bsc1091624, bsc1088705 - CVE-2017-9269: Be sure bad packages do not stay in the cache bsc1045735 Changes in libzypp : - Update to...

openSUSE Security Update : curl (openSUSE-2019-633)

This update for curl fixes the following issues : Security issue fixed : - CVE-2018-0500: Fix a SMTP send heap buffer overflow bsc1099793. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : curl (openSUSE-2019-903)

This update for curl fixes the following issues : - CVE-2018-16839: A SASL password overflow via integer overflow was fixed which could lead to crashes bsc1112758 - CVE-2018-16840: A use-after-free in SASL handle close was fixed which could lead to crashes bsc1112758 - CVE-2018-16842: A...

EulerOS 2.0 SP3 : curl (EulerOS-SA-2019-1090)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies t...

WPScan v3.4.5 - Black Box WordPress Vulnerability Scanner

WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites. INSTALL Prerequisites Optional but highly recommended: RVM Ruby = 2.3 - Recommended: latest Ruby 2.5.0 to 2.5.3 can caus...

OPENSUSE-SU-2019:0174-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP bsc1123378. - CVE-2019-3822: Fixed a stack based buffer overflow in the function creating an outgoing NTLM type-3 message...

Photon OS 1.0: Curl PHSA-2019-1.0-0205

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0205. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122898;...

Photon OS 2.0: Curl PHSA-2019-2.0-0131

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0131. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122910;...

Critical Photon OS Security Update - PHSA-2019-0216

Updates of 'gettext', 'python3', 'curl', 'libarchive', 'python2' packages of Photon OS have been released...

Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio

Summary Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio Vulnerability Details CVEID: CVE-2018-14618 DESCRIPTION: cURL libcurl is vulnerable to a buffer overflow, caused by an integer overflow flaw in the Curlntlmcoremknthash internal function in the NTLM...

The vulnerability of the NTLM type-2 function of the libcurl library, which allows a hacker to trigger a service failure

The vulnerability of NTLM type-2 in the libcurl library is related to incorrect validation of incoming data, which leads to reading beyond the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the vout function in the software tool for interacting with curl servers allows a hacker to disclose sensitive information and cause service failures.

The vulnerability of the vout function in the toolmsgstr.c file of the software for interacting with curl servers relates to reading beyond the buffer boundaries when the buffer is overflowing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause...

GLSA-201903-03 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201903-03 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service condition...

cURL: Multiple vulnerabilities

Background A command line tool and library for transferring data with URLs. Description Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact Remote attackers could cause a Denial of Service condition. Workaround There is no...