CVE-2017-1000083

backend/comics/comics-document.c aka the comic book backend in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a...

libgedit.a 3.22.1 Denial Of Service

whom it may concern, Title: libgedit.a mishandeling NUL blocks in geditGNOME text editor | Denial of service CVE: CVE-2017-14108 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://gnome.org , https://wiki.gnome.org/Apps/Gedit Version : All Version 3.22.1 and older version Tested...

libgedit.a 3.22.1 Denial Of Service Vulnerability

Exploit for linux platform in category dos / poc whom it may concern, Title: libgedit.a mishandeling NUL blocks in geditGNOME text editor | Denial of service CVE: CVE-2017-14108 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://gnome.org , https://wiki.gnome.org/Apps/Gedit Versi...

openSUSE Security Update : gnome-shell (openSUSE-2017-974)

This update for gnome-shell provides the following fixes : - Fix not intuitive login screen for root user bsc1047262 - Disable session selection button when it's hidden in user switch dialog bsc1034584, bsc1034827 - Fix app windows overlay app list in overview screen bsc1008539 - Properly handle...

CentOS 7 : gdm / gnome-session (CESA-2017:2128)

An update for gdm and gnome-session is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libsoup security update

CentOS Errata and Security Advisory CESA-2017:2459 An update for libsoup is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

gdm, gnome security update

CentOS Errata and Security Advisory CESA-2017:2128 An update for gdm and gnome-session is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

clutter, gnome, gstreamer, gstreamer1, orc security update

CentOS Errata and Security Advisory CESA-2017:2060 An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

FreeBSD : evince and atril -- command injection vulnerability in CBT handler (01a197ca-67f1-11e7-a266-28924a333806)

GNOME reports : The comic book backend in evince 3.24.0 and earlier is vulnerable to a command injection bug that can be used to execute arbitrary commands when a CBT file is opened. The same vulnerability affects atril, the Evince fork. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] Fedora 25 Update: mingw-libsoup-2.56.1-1.fc25

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

Scientific Linux Security Update : gdm and gnome-session on SL7.x x86_64 (20170802)

The following packages have been upgraded to a later upstream version: gdm 3.22.3, gnome-session 3.22.3. Security Fixes : - It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is...

libsoup RCE Vulnerability

An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup. A specially crafted HTTP request can cause a stack overflow resulting in remote code execution RCE. An attacker can send a special HTTP request to the vulnerable server to trigger this vulnerability...

libsoup HTTP Server Detection (HTTP)

Detection of libsoup HTTP server. The script sends a connection request to the server and attempts to detect libsoup HTTP server and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

SUSE SLED12 / SLES12 Security Update : gnome-shell (SUSE-SU-2017:2217-1)

This update for gnome-shell provides the following fixes : - Fix not intuitive login screen for root user bsc1047262 - Disable session selection button when it's hidden in user switch dialog bsc1034584, bsc1034827 - Fix app windows overlay app list in overview screen bsc1008539 - Properly handle...

GNOME librest Denial of Service Vulnerability

GNOME librest is a RESTful Software Architecture Style web service helper library for the GNOME project. A security vulnerability exists in the Oauth implementation of GNOME librest prior to version 0.7.93, which stems from the program failing to properly truncate the pointer returned by the...

SUSE-SU-2017:2217-1 Security update for gnome-shell

This update for gnome-shell provides the following fixes: - Fix not intuitive login screen for root user bsc1047262 - Disable session selection button when it's hidden in user switch dialog bsc1034584, bsc1034827 - Fix app windows overlay app list in overview screen bsc1008539 - Properly handle...

SUSE SLES11 Security Update : gnome-session (SUSE-SU-2017:2173-1)

This update for gnome-session fixes the following issues : - CVE-2017-11171: Fix a denial of service condition. an unauthenticated local user can create ICE connections, causing a file descriptor leak in gnome-session bsc1048274. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2017:2173-1 Security update for gnome-session

This update for gnome-session fixes the following issues: - CVE-2017-11171: Fix a denial of service condition. an unauthenticated local user can create ICE connections, causing a file descriptor leak in gnome-session bsc1048274...

[SECURITY] Fedora 25 Update: libsoup-2.56.1-1.fc25

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

GNOME libsoup stack buffer overflow vulnerability

GNOME libsoup is an HTTP client/server library developed by the GNOME project. A stack buffer overflow vulnerability exists in GNOME libsoup version 2.58, which originates when the program fails to properly perform bounds detection on user-submitted input, resulting in the size of copied data...