PT-2012-1164 · Openjpeg +4 · Openjpeg +4

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 1.5.1 Gentoo Linux affected versions not specified Description: The issue concerns multiple vulnerabilities in the OpenJPEG package that can be exploited remotely, potentially leading to breaches of confidentiality,...

GLSA-201208-01 : socat: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201208-01 socat: Arbitrary code execution A vulnerability in the 'xioscanreadline' function in xio-readline.c could cause a heap-based buffer overflow. Impact : A remote attacker could possibly execute arbitrary code with the...

Adobe Flash Player CVE-2012-1535 Remote Code Execution Vulnerability

Description Adobe Flash Player is prone to an unspecified remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Adob...

GLSA-201207-05 : pidgin-otr: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201207-05 pidgin-otr: Arbitrary code execution A format string vulnerability has been found in the 'logmessagecb' function in otr-plugin.c. Impact : A remote attacker could possibly execute arbitrary code with the privileges of th...

GLSA-201207-06 : JRuby: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201207-06 JRuby: Denial of Service JRuby does not properly randomize hash functions to protect against hash collision attacks. Impact : A remote attacker could send a specially crafted input, possibly resulting in a Denial of...

GLSA-201207-01 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201207-01 sudo: Privilege escalation An error in sudo may allow unintended IPv4 hosts to be granted access to commands. Impact : A local attacker could gain escalated privileges. Workaround : There is no known workaround at this...

GLSA-201206-28 : TeX Live: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-28 TeX Live: Multiple vulnerabilities Multiple vulnerabilities have been discovered in texlive-core. Please review the CVE identifiers referenced below for details. Impact : These vulnerabilities might allow user-assisted...

GLSA-201206-35 : nbd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-35 nbd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in nbd. Please review the CVE identifiers referenced below for details. Impact : nbd allows remote attackers to cause a denial of service NULL...

GLSA-201206-27 : mini_httpd: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201206-27 minihttpd: Arbitrary code execution minihttpd does not properly check for shell escapes when parsing HTTP requests. Impact : A remote attacker could send specially crafted HTTP requests, possibly resulting in execution o...

GLSA-201203-18 : Minitube: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201203-18 Minitube: Insecure temporary file usage Tom Pruina reported that Minitube does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges...

Intel CPU Hardware Local Privilege Escalation Vulnerability

Description 64-bit operating systems and virtualization software running on Intel CPU hardware are prone to a local privilege-escalation vulnerability. Attackers can exploit this issue to escalate privileges and execute arbitrary code with kernel-level privileges or to do a guest-to-host virtual...

Oracle Java SE CVE-2012-1723 Remote Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability in Java Runtime Environment. The vulnerability can be exploited over multiple protocols. This issue affects the 'Hotspot' sub-component. This vulnerability affects the following supported versions: 7 Update 4, 6 Update 3...

PT-2012-1126

Name of the Vulnerable Software and Affected Versions RPM versions prior to 4.9.1.3 Description The issue concerns multiple vulnerabilities in the RPM package of Gentoo Linux. These vulnerabilities can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and...

GLSA-201203-08 : libxslt: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201203-08 libxslt: Denial of Service An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact : A remote attacker could entice a user to process an XML file using a specially crafted XSLT stylesheet in an...

PT-2012-1099

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.13 Puppet versions 2.7.x through 2.7.10 Puppet Enterprise PE Users versions 1.0 through 1.2.x Puppet Enterprise PE Users versions 2.0.x through 2.0.2 Description The issue affects the puppet package in Gentoo...

GLSA-201203-01 : spamdyke: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201203-01 spamdyke: Arbitrary code execution Boundary errors related to the 'snprintf' and 'vsnprintf' functions in spamdyke could cause a buffer overflow. Impact : A remote attacker could possibly execute arbitrary code or cause ...

GLSA-201202-08 : stunnel: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201202-08 stunnel: Arbitrary code execution An unspecified heap vulnerability was discovered in stunnel. Impact : The vulnerability may possibly be leveraged to perform remote code execution or a Denial of Service attack. Workarou...

libpng chunk decompression integer overflow vulnerability

Overview The libpng library contains an integer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphi...

Oracle Java SE Remote Java Runtime Environment Code Execution Vulnerability

Description Oracle Java SE is prone to a remote code execution vulnerability in Java Runtime Environment. An attacker can exploit this issue to bypass the Java sandbox restriction and execute arbitrary code. This vulnerability affects the following supported versions: 7 Update 2, 6 Update 30, 5.0...

[ GLSA 201201-18 ] bip: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 201201-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...