openSUSE Security Update : hylafax+ (openSUSE-2020-1210)

This update for hylafax+ fixes the following issues : Hylafax was updated to upstream version 7.0.3. Security issues fixed : - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem boo1173521. - CVE-2020-15397: Sourcing of files into binaries from user...

OPENSUSE-SU-2020:1209-1 Security update for hylafax+

This update for hylafax+ fixes the following issues: Hylafax was updated to upstream version 7.0.3. Security issues fixed: - CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem boo1173521. - CVE-2020-15397: Sourcing of files into binaries from user...

Security update for hylafax+ (moderate)

openSUSE Security Update: Security update for hylafax+ Announcement ID: openSUSE-SU-2020:1210-1 Rating: moderate References: 1173519 1173521 Cross-References: CVE-2020-15396 CVE-2020-15397 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description...

[SECURITY] Fedora 32 Update: hylafax+-7.0.3-1.fc32

HylaFAXtm is a enterprise-strength fax server supporting Class 1 and 2 fax modems on UNIX systems. It provides spooling services and numerous supporting fax management tools. The fax clients may reside on machines different from the server and client implementations exist for a number of platform...

[SECURITY] Fedora 31 Update: hylafax+-7.0.3-1.fc31

HylaFAXtm is a enterprise-strength fax server supporting Class 1 and 2 fax modems on UNIX systems. It provides spooling services and numerous supporting fax management tools. The fax clients may reside on machines different from the server and client implementations exist for a number of platform...

Fedora: Security Advisory for hylafax+ (FEDORA-2020-01eb48bcce)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : hylafax+ (openSUSE-2020-958)

This update for hylafax+ fixes the following issues : Security issue fixed : - CVE-2020-8024 boo1172731 hylafax+ was updated to version 7.0.2 : - change FIXEDWIDTH default to better accommodate auto-rotation 13 Dec 2019 - prevent SSLaccept from blocking 5 Dec 2019 - support libtiff v4.1 5 Dec 201...

Unspecified Vulnerability in iFAX Solutions HylaFAX+ and HylaFAX Enterprise

iFAX Solutions HylaFAX+ is an open source, enterprise-class send and receive fax system from iFAX Solutions, Inc. The system provides fax functionality for users on a local area network.HylaFAX Enterprise is the commercial version. A security vulnerability exists in iFAX Solutions HylaFAX+ 7.0.2...

CVE-2020-11766

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF Internet Fax image files, compressed with the CCITT Group 4 compression algorithm. An attacker could use this flaw to create a specially-crafted TIFF file that,...

Internet Bug Bounty: CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()

Hello, There is an out-of-bounds write that is likely exploitable while performing Huffman decoding of Fax images. The technical details are as follows. Type: integer underflow produces out of bounds heap/etc write Platform: 32-bit Details: 390 MagickExport MagickPassFail HuffmanDecodeImageImage...

CVE-2019-19363

An issue was discovered in Ricoh including Savin and Lanier Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX...

CVE-2019-19363

An issue was discovered in Ricoh including Savin and Lanier Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX...

Design/Logic Flaw

An issue was discovered in Ricoh including Savin and Lanier Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX...

CVE-2019-19363

An issue was discovered in Ricoh including Savin and Lanier Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX...

PT-2020-10148 · Ricoh · Pc Fax Generic Driver +8

Name of the Vulnerable Software and Affected Versions: Ricoh Windows printer drivers affected versions not specified PCL6 Driver for Universal Print versions prior to 4.0 PS Driver for Universal Print versions prior to 4.0 PC FAX Generic Driver versions prior to 2020 Generic PCL5 Driver versions...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43412)

FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/fax/faxlogview.php in FusionPBX 4.4.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the faxuuid parameter...

CVE-2019-19384

FusionPBX 4.4.1 is affected by a cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php, exploitable via the fax_uuid parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Connected sources confirm the vulnerability; remediation or patched details are ...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-47028)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in the app/fax/faxfiles.php file in FusionPBX...

CVE-2019-18976

An issue was discovered in respjsipt38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940...