Debian DSA-4546-1 : openjdk-11 - security update

Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in cross-site scripting, denial of service, information disclosure or Kerberos user impersonation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-4545-1 : mediawiki - security update

It was discovered that the Special:Redirect functionality of MediaWiki, a website engine for collaborative work, could expose suppressed user names, resulting in an information leak. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Security Bulletin: Vulnerabilities in GNU OpenSSL (1.0.2 series) affect IBM Netezza Analytics

Summary Open Source OpenSSL is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-0734 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing side channel attack in the DSA...

Debian: Security Advisory (DSA-4544-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4539-3] openssl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4539-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 13, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4539-3] openssl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4539-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 13, 2019 https://www.debian.org/security/faq -...

CVE-2017-3738

There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attack...

Debian DSA-4542-1 : jackson-databind - security update

It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deserialization. This allowed an attacker providing maliciously crafted input to perform code execution, or read arbitrary files on the server....

Debian DSA-4541-1 : libapreq2 - security update

Max Kellermann reported a NULL pointer dereference flaw in libapreq2, a generic Apache request library, allowing a remote attacker to cause a denial of service against an application using the library application crash if an invalid nested 'multipart' body is processed. C Tenable Network Security...

Debian: Security Advisory (DSA-4541-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4540-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-3728

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4. are vulnerable to an out-of-bounds read vulnerability when...

CVE-2019-3728

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4. are vulnerable to an out-of-bounds read vulnerability when...

Buffer overflow

RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 in 4.0.x and 4.1.4 in 4.1.x and RSA BSAFE Micro Edition Suite versions prior to 4.0.13 in 4.0.x and prior to 4.4 in 4.1.x, 4.2.x, 4.3.x are vulnerable to a Buffer Over-read vulnerability when processing DSA signature. A malicious remote...

CVE-2019-3728

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4. are vulnerable to an out-of-bounds read vulnerability when...

CVE-2019-3728

Dell BSAFE Crypto-C Crypto-C and Micro Edition family (Crypto-C RSA 6.4; Crypto-C Micro Edition 4.x; Micro Edition Suite 4.x) are affected by CVE-2019-3728 due to an out-of-bounds read in ASN.1 decoding (_A_DecodeType/_A_DecodeElement) caused by integer overflow/underflow when parsing certain ASN...

PT-2019-16672 · Rsa · Rsa Bsafe Crypto-C Micro Edition +1

Name of the Vulnerable Software and Affected Versions: RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 RSA BSAFE Crypto-C Micro Edition version 4.1.4 RSA BSAFE Micro Edition Suite versions prior to 4.0.13 RSA BSAFE Micro Edition Suite versions prior to 4.4 Description: The issue is...

Debian DSA-4536-1 : exim4 - security update

A buffer overflow flaw was discovered in Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

Debian DSA-4534-1 : golang-1.11 - security update

It was discovered that the Go programming language did accept and normalize invalid HTTP/1.1 headers with a space before the colon, which could lead to filter bypasses or request smuggling in some setups. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-4535-1 : e2fsprogs - security update

Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/ext3/ext4 file system utilities. Running e2fsck on a malformed file system can result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks...