3792 matches found
MGASA-2018-0027 Updated elfutils packages fix security vulnerabilities
The elfutils package has been updated to version 0.169 to fix several bugs that can lead to memory allocation failures or heap overflows CVE-2016-10254, CVE-2016-10255, CVE-2017-7607, CVE-2017-7608, CVE-2017-7609, CVE-2017-7610, CVE-2017-7611, CVE-2017-7612, CVE-2017-7613...
The vulnerability in the component of libsvn_fs_fs/fs_fs.c of the Subversion version control system allows a attacker to disclose protected information or cause service failures.
The vulnerability in the libsvnfsfs/fsfs.c component of the Subversion version control system exists due to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to damaged repositories of FSFS FileSystem atop the FileSystem or caus...
The vulnerability of the KEYS subsystem in the Linux operating system allows a hacker to trigger a service failure or cause other adverse effects.
The vulnerability of the KEYS subsystem in the Linux operating system is related to incorrect synchronization of update procedures. Exploiting this vulnerability can allow an attacker to cause service failures or other effects through specially crafted system calls...
The vulnerability of the Junos operating system’s IPv6 traffic processing service allows attackers to cause resource exhaustion and kernel failures.
The vulnerability of the Junos operating system’s IPv6 traffic processing service is related to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely cause resource exhaustion and kernel failures through specially created IPv6 traffic...
The vulnerability of the connected authentication module (PAM) of the Junos operating system, allowing a perpetrator to execute arbitrary code
The vulnerability of the Junos operating system’s authentication module PAM exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause failures in the “demons” that use PAM...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to trigger a service failure
The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Document Sciences xPression enterprise automation system arises from incorrect restrictions on XML references to external objects. This allows attackers to gain access to system files, perform SRF attacks, or cause service failures.
The vulnerability of the Document Sciences xPression enterprise automation system arises from an incorrect limitation on XML references to external objects /xFramework/services/QuickDoc.QuickDocHttpSoap11Endpoint/. Exploiting this vulnerability could allow a malicious actor to gain access to syst...
How to recreate Local Host Cache on Citrix Virtual Apps & Desktops
Citrix ConfigSync Service outputs Event ID 505 errors periodically, "The Citrix Config Sync Service failed an import."...
October 17, 2017—KB4035176 Improvements and Fixes to Universal C Runtime in Windows
None None...
Security Industry Failing to Establish Trust
MADRID—In other industries, failure is embraced as a learning opportunity. In security, not so much. Instead, it’s too often an opportunity to victim-shame, a chance to mock a corporate giant such as Equifax which recently lost 145 million customer records and had a CISO—albeit with a lengthy IT...
The vulnerability of the Single Sign-On implementation for management tools in VMware vCenter Server and VMware vRealize Automation arises from incorrect restrictions on XML links to external objects. This allows a malicious actor to trigger service failures or gain access to confidential information.
The vulnerability of Single Sign-On implementations for VMware vCenter Server and VMware vRealize Automation management tools is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain...
The vulnerability of the dynamic analyzer for XML files in the wsisapi.dll library of the enterprise automation system 1C:Enterprise allows a perpetrator to cause service failures and gain access to internal network resources.
The vulnerability of the dynamic analyzer for XML files in the wsisapi.dll library of the enterprise automation system 1C:Enterprise is related to the implementation of XML. Exploiting this vulnerability can allow a malicious actor to cause service failures and gain access to internal network...
Design/Logic Flaw
The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...
DEBIAN-CVE-2015-3420
The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...
CVE-2015-3420
The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...