8249 matches found
Debian Security Advisory DSA 3547-1 (imagemagick - security update)
Several vulnerabilities were discovered in Imagemagick, a program suite for image manipulation. This update fixes a large number of potential security problems such as null-pointer access and buffer-overflows that might lead to memory leaks or denial of service. None of these security problems ha...
DSA-3547-1 imagemagick - security update
Bulletin has no description...
Multiple vulnerabilities in OpenSSL affect AIX
IBM SECURITY ADVISORY First Issued: Mon Apr 4 11:04:25 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory18.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory18.asc...
The Panama Papers ā Biggest leak in History Exposes Global Corruption
A huge trove of confidential documents from the Panamanian law firm Mossack Fonseca was made public on Sunday in what's known as One of the Worldās Largest Data Leaks ever, called The Panama Papers. Over 11.5 Million Leaked Files including 2.6 Terabytes of Data Even larger than the NSA wires leak...
OracleVM 3.3 / 3.4 : openssh (OVMSA-2016-0038)
The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices 1245969 - CVE-2016-3115: missing sanitisation of input for X11 forwarding 1317816 - SSH2MSGDISCONNECT for user initiate...
Amazon Linux AMI : kernel (ALAS-2016-669)
When running as a Xen 64-bit PV guest, user mode processes not supposed to be able to access I/O ports may be granted such permission, potentially resulting in one or more of in-guest privilege escalation, guest crashes Denial of Service, or in-guest information leaks. CVE-2016-3157 In some cases...
openafs -- multiple vulnerabilities
The OpenAFS development team reports: Foreign users can bypass access controls to create groups as system:administrators, including in the user namespace and the system: namespace. The contents of uninitialized memory are sent on the wire when clients perform certain RPCs. Depending on the RPC, t...
Mozilla Firefox Multiple Vulnerabilities (Mar 2016) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Mozilla Firefox Multiple Vulnerabilities (Mar 2016) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Vimeo: Private, embeddable videos leaks data through Facebook & Open Graph
Clip meta-data disclosed to thrid-party crawlers...
Fedora 22 : conntrack-tools-1.4.2-9.fc22 (2015-1aee5e6f0b)
Addresses a crasher CVE-2015-6496 and various leaks Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 23 : pax-utils-1.1.4-1.fc23 (2015-73cdd43bc0)
Changes since 1.0.5: security: whitelist the getcwd syscall security: fix build on systems w/out sisyscall security: whitelist the futex syscall security: whitelist dup syscalls security: do not warn when seccomp is disabled in the kernel security: whitelist fakeroot syscalls security: add a debu...
Vulnerability in OpenSSL - Fix memory issues in BIO_*printf functions
The internal |fmtstr| function used in processing a ā%sā format string in the BIOprintf functions could overflow while calculating the length of a string and cause an OOB read when printing very long strings. Additionally the internal |doaproutch| function can attempt to write to an OOB memory...
Debian DLA-423-1 : krb5 security update
CVE-2015-8629 It was discovered that an authenticated attacker can cause kadmind to read beyond the end of allocated memory by sending a string without a terminating zero byte. Information leakage may be possible for an attacker with permission to modify the database. CVE-2015-8631 It was...
USN-2908-2 linux-lts-wily vulnerabilities
halfdog discovered that OverlayFS, when mounting on top of a FUSE mount, incorrectly propagated file attributes, including setuid. A local unprivileged attacker could use this to gain privileges. CVE-2016-1576 halfdog discovered that OverlayFS in the Linux kernel incorrectly propagated security...
ALPINE-CVE-2015-8631
Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...
CVE-2015-8631
Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...
CVE-2015-8631
Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...
DEBIAN-CVE-2015-8631
Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...
UBUNTU-CVE-2015-8631
Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...