2664 matches found
Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2017-0021)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0021 advisory. 1.4.5-6 - Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz1400897 1.4.5-5 - vmncdec: Sanity-check...
Moderate: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: gstreamer-plugins-bad-free security update
An update for gstreamer-plugins-bad-free is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2016-9809
An out-of-bounds heap read flaw was found in GStreamer's H.264 parser. A remote attacker could use this flaw to cause an application using GStreamer to crash...
h-net.org XSS vulnerability
Open Bug Bounty ID: OBB-186168 Description| Value ---|--- Affected Website:| h-net.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2016-6384
Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service device reload via crafted fields in an H.323 message, aka Bug ID CSCux04257...
Code injection
Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service device reload via crafted fields in an H.323 message, aka Bug ID CSCux04257...
CVE-2016-6384
Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service device reload via crafted fields in an H.323 message, aka Bug ID CSCux04257...
CVE-2016-6384
CVE-2016-6384 affects Cisco IOS/IOS XE H.323 Message Validation DoS. Cisco reports that Cisco IOS 12.2–12.4, 15.0–15.6, and IOS XE 3.1–3.17, plus 16.2, are vulnerable when processing crafted H.323 fields, potentially causing a device reload/crash. Connected sources confirm the root cause as impro...
CVE-2016-6384: Improper Input Validation
Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service device reload via crafted fields in an H.323 message, aka Bug ID CSCux04257...
ALPINE-CVE-2016-3623
The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...
DEBIAN-CVE-2016-3623
The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...
PT-2016-5624
Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier Description The issue allows remote attackers to cause a denial of service by setting certain parameters to 0. Specifically, this can be done by setting the v or h parameter to 0 in the rgb2ycbcr tool...
Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08397)
Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the H.323 subsystem in Cisco IOS and IOS XE Software, which arises from a program's failure to properly validate fields in the H.323 protocol group. A...
Cisco IOS Software H.323 Message Validation Denial of Service Vulnerability (cisco-sa-20160928-h323)
A vulnerability in the H.323 subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Cisco IOS XE Software H.323 Message Validation Denial of Service Vulnerability
A vulnerability in the H.323 subsystem of Cisco IOS XE Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Cisco IOS and IOS XE Software H.323 Message Validation Denial of Service Vulnerability
A vulnerability in the H.323 subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition on an affected device. The vulnerability is due to a failure to properly validate certain fields in an H.323 protocol suite message...
PT-2016-6864
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.17 and 16.2 Description A vulnerability in the H.323 subsystem could allow an unauthenticated, remote attacker to create a denial of service DoS...
Debian DLA-632-1 : wireshark security update
Multiple vulnerabilities were discovered in the dissectors for H.225, Catapult DCT2000, UMTS FP and IPMI, which could result in denial of service or the execution of arbitrary code. For Debian 7 'Wheezy', these problems have been fixed in version 1.12.1+g01b65bf-4+deb8u6deb7u4. We recommend that...