FreeBSD : owncloud -- multiple vulnerabilities (3166222b-c6a4-11e5-96d6-14dae9d210b8)

Owncloud reports : - Reflected XSS in OCS provider discovery oC-SA-2016-001 - Information Exposure Through Directory Listing in the file scanner oC-SA-2016-002 - Disclosure of files that begin with '.v' due to unchecked return value oC-SA-2016-003 %NASLMINLEVEL 70300 C Tenable Network Security,...

FreeBSD : nghttp2 -- use after free (93eadedb-c6a6-11e5-96d6-14dae9d210b8)

nghttp2 reports : This release fixes heap-use-after-free bug in idle stream handling code. We strongly recommend to upgrade the older installation to this latest version as soon as possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

FreeBSD : nginx -- multiple vulnerabilities (c1c18ee1-c711-11e5-96d6-14dae9d210b8)

Maxim Dounin reports : Several problems in nginx resolver were identified, which might allow an attacker to cause worker process crash, or might have potential other impact if the 'resolver' directive is used in a configuration file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD-SA-16:11.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:11.openssl Security Advisory The FreeBSD Project Topic: OpenSSL SSLv2 ciphersuite downgrade vulnerability Category: contrib Module: openssl Announced:...

CVE-2016-1882

FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service kernel crash via vectors related to creating a TCP connection with the TCPMD5SIG and TCPNOOPT socket options...

CVE-2016-1882

FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service kernel crash via vectors related to creating a TCP connection with the TCPMD5SIG and TCPNOOPT socket options...

CVE-2016-1879

The Stream Control Transmission Protocol SCTP module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service assertion failure or NULL pointer dereference and kernel panic via a crafted ICMPv6...

CVE-2016-1879

The Stream Control Transmission Protocol SCTP module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service assertion failure or NULL pointer dereference and kernel panic via a crafted ICMPv6...

Design/Logic Flaw

FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service kernel crash via vectors related to creating a TCP connection with the TCPMD5SIG and TCPNOOPT socket options...

CVE-2016-1882

CVE-2016-1882 affects FreeBSD kernels: 9.3 before p33, 10.1 before p26, and 10.2 before p9. A programming error in processing a TCP connection with both TCP_MD5SIG and TCP_NOOPT socket options may cause a kernel crash, enabling a remote attacker to trigger a denial of service. The available docum...

CVE-2016-1879

The CVE-2016-1879 entry concerns the SCTP module in FreeBSD when IPv6 is enabled. A crafted ICMPv6 packet can trigger a denial of service via an assertion failure or NULL pointer dereference, leading to a kernel panic. Affected products/versions per the description include FreeBSD 9.3 prior to p3...

CVE-2016-1879

The Stream Control Transmission Protocol SCTP module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote attackers to cause a denial of service assertion failure or NULL pointer dereference and kernel panic via a crafted ICMPv6...

CVE-2016-1882

FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service kernel crash via vectors related to creating a TCP connection with the TCPMD5SIG and TCPNOOPT socket options...

CVE-2016-1882

Removed by vendor...

CVE-2016-1879

Removed by vendor...

FreeBSD : openssl -- multiple vulnerabilities (3679fd10-c5d1-11e5-b85f-0018fe623f2b)

OpenSSL project reports : - Historically OpenSSL only ever generated DH parameters based on 'safe' primes. More recently in version 1.0.2 support was provided for generating X9.42 style parameter files such as those required for RFC 5114 support. The primes used in such files may not be 'safe'...

FreeBSD : prosody -- user impersonation vulnerability (50394bc9-c5fa-11e5-96a5-d93b343d1ff7)

The Prosody team reports : Adopt key generation algorithm from XEP-0185, to prevent impersonation attacks CVE-2016-0756 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...

FreeBSD : phpmyadmin -- Unsafe comparison of XSRF/CSRF token (71b24d99-c60b-11e5-bf36-6805ca0b3d42)

The phpMyAdmin development team reports : The comparison of the XSRF/CSRF token parameter with the value saved in the session is vulnerable to timing attacks. Moreover, the comparison could be bypassed if the XSRF/CSRF token matches a particular pattern. We consider this vulnerability to be...

FreeBSD : phpmyadmin -- Multiple XSS vulnerabilities (6cc06eec-c60b-11e5-bf36-6805ca0b3d42)

The phpMyAdmin development team reports : - With a crafted table name it is possible to trigger an XSS attack in the database search page. - With a crafted SET value or a crafted search query, it is possible to trigger an XSS attacks in the zoom search page. - With a crafted hostname header, it i...

FreeBSD : phpmyadmin -- XSS vulnerability in SQL editor (7a59e283-c60b-11e5-bf36-6805ca0b3d42)

The phpMyAdmin development team reports : With a crafted SQL query, it is possible to trigger an XSS attack in the SQL editor. We consider this vulnerability to be non-critical. This vulnerability can be triggered only by someone who is logged in to phpMyAdmin, as the usual token protection...