[slackware-security] curl

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.50.3-i586-1slack14.2.txz: Upgraded. Fixed heap overflows in four libcurl functions: curlescape,...

openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2016:1724-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Internet Bug Bounty: Multiple vulnerabilities related to PCRE functions (already fixed)

This issue was reported a while ago at: https://bugs.php.net/bug.php?id=70345 The report is now public, but for some reason I was not notified by email when the report was closed. I just remembered to check again today and noticed multiple code changes were made and the bug is now considered...

Adobe Flash - uint Capacity Field

Adobe Flash - uint Capacity Field Source: https://code.google.com/p/google-security-research/issues/detail?id=504 The latest version of the Vector. length check in Flash 18,0,0,232 is not robust against memory corruptions such as heap overflows. While it’s no longer possible to obviously bypass t...

SUSE SLED11 / SLES11 Security Update : e2fsprogs (SUSE-SU-2015:1364-1)

Two security issues were fixed in e2fsprogs : CVE-2015-0247: Various heap overflows were fixed in e2fsprogs fsck, dumpe2fs, e2image. CVE-2015-1572: Fixed a potential buffer overflow in closefs. bsc918346 Additionally, badblocks was enhanced to work with very large partitions. bsc932539 Note that...

SUSE SLED12 / SLES12 Security Update : e2fsprogs (SUSE-SU-2015:1341-1)

Two security issues were fixed in e2fsprogs : Security issues fixed : - CVE-2015-0247: Various heap overflows were fixed in e2fsprogs fsck, dumpe2fs, e2image.... - CVE-2015-1572: Fixed a potential buffer overflow in closefs bsc918346 Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2015:1364-1 Security update for e2fsprogs

Two security issues were fixed in e2fsprogs: CVE-2015-0247: Various heap overflows were fixed in e2fsprogs fsck, dumpe2fs, e2image. CVE-2015-1572: Fixed a potential buffer overflow in closefs. bsc918346 Additionally, badblocks was enhanced to work with very large partitions. bsc932539 Security...

openSUSE Security Update : libevent (openSUSE-SU-2015:0132-1)

libevent was updated to fixed heap overflows in buffer API bsc897243 CVE-2014-6272 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-68. The text description of this plugin is C SU...

openSUSE Security Update : jasper (openSUSE-SU-2014:1644-1)

jasper was updated to fix one security issue. This security issue was fixed : - Heap overflows in libjasper CVE-2014-9029. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-781. Th...

GV PostScript Viewer - Remote Buffer overflow Exploit (2)

No description provided by source. / there are at least 4 other stack buffer overflows, and 2 heap overflows. the first exploit i wrote exploited the one in the GLSA, and this one exploits that hole and four other ones as well. all of these are in the psscan function located in the ps.c file: 'gr...

SuSE 11.2 Security Update : libotr (SAT Patch Number 7076)

This update fixes various heap overflows in libotr. CVE-2012-3461 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

Steam Gaming Platform Vulnerable to Remote Exploits; 50 Million at Risk

More than 50 million users of the Steam gaming and media distribution platform are at risk for remote compromise because of weaknesses in the platform’s URL protocol handler, a pair of researchers at ReVuln wrote in a paper released this week. Luigi Auriemma and Donato Ferrante discovered a numbe...

libotr multiple buffer overflows

multiple heap overflows...

Ubuntu Update for libotr USN-1541-1

Ubuntu Update for Linux kernel vulnerabilities USN-1541-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15411.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libotr USN-1541-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libotr vulnerability (USN-1541-1)

Justin Ferguson discovered multiple heap overflows in libotr. A remote attacker could use this to craft a malformed OTR message that could cause a denial of service via application crash or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description...

USN-1541-1: libotr vulnerability

Justin Ferguson discovered multiple heap overflows in libotr. A remote attacker could use this to craft a malformed OTR message that could cause a denial of service via application crash or possibly execute arbitrary code...

Scientific Linux Security Update : openoffice.org2 on SL4.5 and 4.6 i386/x86_64

Multiple heap overflows and an integer underflow were found in the Quattro ProR import filter. An attacker could create a carefully crafted Quattro Pro file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the file was opened by a victim. CVE-2007-5745, CVE-2007-5747...

Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64

Multiple heap overflows and an integer underflow were found in the Quattro ProR import filter. An attacker could create a carefully crafted Quattro Pro file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the file was opened by a victim. CVE-2007-5745, CVE-2007-5747...

PT-2012-1163 · Openjpeg +2 · Openjpeg +2

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 1.5.1 Description: The issue is related to multiple heap-based buffer overflows in the j2k read sot function, which can be triggered by a crafted JPEG 2000 image file. This can cause a denial of service, leading to ...