Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20121218)

This update fixes the following security issues : - It was found that a previous update did not correctly fix the CVE-2011-4131 issue. A malicious Network File System version 4 NFSv4 server could return a crafted reply to a GETACL request, causing a denial of service on the client. CVE-2012-2375,...

CentOS 6 : kernel (CESA-2012:1580)

Updated kernel packages that fix multiple security issues, numerous bugs and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...

RHEL 6 : kernel (RHSA-2012:1580)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1580 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: It wa...

kernel: net: divide by zero in tcp algorithm illinois

The tcpillinoisinfo function in net/ipv4/tcpillinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcpcongestioncontrol illinois setting is enabled, allows local users to cause a denial of service divide-by-zero error and OOPS by reading TCP stats...

Moderate: Red Hat Security Advisory: kernel security, bug fix and enhancement update

Updated kernel packages that fix multiple security issues, numerous bugs and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...

UBUNTU-CVE-2012-4565

The tcpillinoisinfo function in net/ipv4/tcpillinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcpcongestioncontrol illinois setting is enabled, allows local users to cause a denial of service divide-by-zero error and OOPS by reading TCP stats...

PT-2012-5481 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.4.19 Description: The issue allows local users to cause a denial of service, resulting in a divide-by-zero error and OOPS, by reading TCP stats when the net.ipv4.tcp congestion control illinois setting is...

Debian DSA-2559-1 : libexif - several vulnerabilities

Several vulnerabilities were found in libexif, a library used to parse EXIF meta-data on camera files. - CVE-2012-2812 : A heap-based out-of-bounds array read in the exifentrygetvalue function allows remote attackers to cause a denial of service or possibly obtain potentially sensitive informatio...

kernel security and bug fix update

2.6.32-279.11.1.el6 - net core: Fix napigrofrags vs netpoll path Amerigo Wang 857854 845347 - netdrv benet: disable BH in callers of beprocessmcc Amerigo Wang 857854 845347 - net bonding: remove IFFINNETPOLL flag Amerigo Wang 857854 845347 - mm fix contigpagedata kABI breakage and related memory...

Foxit Reader 5.4.3.0920 - Crash (PoC)

Title : Foxit Reader suffers from Division By Zero Version : 5.4.3.0920 Date : 2012-09-28 Vendor : http://www.foxitsoftware.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 Bug : ---- division by zero vulnerability during the handling of the pdf...

Real Networks RealPlayer < 15.0.6.14 Multiple Vulnerabilities

Binary data 6574.prm...

CVE-2012-3234: Undefined Security Weakness

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash or possibly have...

PT-2012-4589

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.6.14 RealPlayer SP versions 1.0 through 1.1.5 Mac RealPlayer versions prior to 12.0.1.1750 Description The issue arises from improper handling of codec frame sizes in RealAudio files, allowing remote attackers...

Design/Logic Flaw

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

DEBIAN-CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

CVE-2012-1107

TagLib 1.7 and earlier is affected by CVE-2012-1107 due to a flaw in analyzeCurrent (ape/apeproperties.cpp) that can be triggered by a crafted sampleRate in an APE file, causing a divide-by-zero and an application crash (denial of service). Affected component: TagLib’s APE handling; the vulnerabi...

CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

CVE-2012-1107: Undefined Security Weakness

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...