3337 matches found
The vulnerability of the get_cookies function in the HTTP library libsoup, which allows a hacker to execute arbitrary code.
The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...
CentOS Update for gdm CESA-2018:3140 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the `oup_body_input_stream_read_chunked` function in the `libsoup` library of the GNOME graphical interface for Linux operating systems allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the oupbodyinputstreamreadchunked function in the libsoup/libsoup-body-input-stream.c file, a library for GNOME’s graphical interface in Linux operating systems, arises due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute...
SUSE SLES12 Security Update : libsoup (SUSE-SU-2018:2204-2)
This update for libsoup fixes the following issues : Security issue fixed : CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers bsc1052916. Bug fixes: bsc1086036:...
SUSE-SU-2018:2204-2 Security update for libsoup
This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames bsc1100097. - CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers bsc1052916. Bug fixes: - bsc1086036:...
Fedora 28 : libsoup (2018-fb2afee474)
This update backports an upstream fix for CVE-2018-12910. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
EulerOS 2.0 SP2 : libsoup (EulerOS-SA-2018-1419)
According to the version of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Tenable Network Security has extracted the preceding description...
EulerOS 2.0 SP3 : libsoup (EulerOS-SA-2018-1391)
According to the version of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Crash in soupcookiejar.c:getcookies on empty hostnames CVE-2018-12910 Note that Tenable Network Security has extracted the preceding description...
CentOS 7 : PackageKit / accountsservice / adwaita-icon-theme / appstream-data / at-spi2-atk / etc (CESA-2018:3140)
An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...
PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update
CentOS Errata and Security Advisory CESA-2018:3140 An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 7 : GNOME (RHSA-2018:3140)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3140 advisory. GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fixes: libsoup: Crash in soupcookiejar.c:getcookies on empty...
webkitgtk: WebSockets don't use system proxy settings
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by...
webkitgtk: Improper TLS certificate verification for WebSocket connections
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...
libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames
An out-of-bounds read has been discovered in libsoup when getting cookies from a URI with empty hostname. An attacker may use this flaw to cause a crash in the application...
Moderate: Red Hat Security Advisory: GNOME security, bug fix, and enhancement update
An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...
Photon OS 1.0: Libgcrypt / Libsoup PHSA-2018-1.0-0182 (deprecated)
An update of 'libsoup', 'libgcrypt' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0182. The text itself is copyright C...
Photon OS 2.0: Libgcrypt / Libsoup PHSA-2018-2.0-0091 (deprecated)
An update of 'libgcrypt', 'libsoup' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0091. The text itself is copyright C...
Critical Photon OS Security Update - PHSA-2018-0091
Updates of 'libgcrypt', 'libsoup' packages of Photon OS have been released...