Design/Logic Flaw

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

CVE-2014-8004

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

Cisco IOS LISP ITR DoS (CSCun73782)

The remote Cisco device is potentially affected by an issue related to the handling of certain parameters in Locator/ID Separation Protocol LISP control messages sent to the ingress tunnel router ITR component. A remote, unauthenticated attacker could exploit this issue by sending specially craft...

Cisco IOS XE LISP ITR DoS (CSCun73782)

The remote Cisco device is potentially affected by an issue related to the handling of certain parameters in Locator/ID Separation Protocol LISP control messages sent to the ingress tunnel router ITR component. A remote, unauthenticated attacker could exploit this issue by sending specially craft...

openSUSE Security Update : emacs and depending packages (openSUSE-SU-2012:1348-1)

This update fixes the following issues for emacs, emacs-w3, gnuplot and ddskk: emacs : - Add fix for bnc775993 which disable arbitrary lisp code execution when 'enable-local-variables' is set to ':safe' CVE-2012-3479 - Add fix for bnc780653 to allow emacs to parse tar archives with PAX extended...

CVE-2014-3262

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.33S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service CEF outage and packet drops via malformed messages, aka Bug ID CSCun73782...

CVE-2014-3262

CVE-2014-3262 affects Cisco IOS 15.3(3)S and earlier and IOS XE. The issue is improper validation of parameters in ITR control messages for Locator/ID Separation Protocol (LISP) processing, allowing a remote, unauthenticated attacker to trigger a denial of service by sending malformed LISP contro...

CVE-2014-3262

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.33S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service CEF outage and packet drops via malformed messages, aka Bug ID CSCun73782...

Cisco IOS Software and IOS XE Software LISP Denial of Service Vulnerability

A vulnerability in Locator/ID Separation Protocol LISP control message processing in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a vulnerable device to disable Cisco Express Forwarding and eventually drop traffic passing through. The...

Code injection

lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/...

Mandriva Linux Security Advisory : emacs (MDVSA-2013:076)

Updated emacs packages fix security vulnerabilities : Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent...

Debian DSA-2603-1 : emacs23 - programming error

Paul Ling discovered that Emacs insufficiently restricted the evaluation of Lisp code if enable-local-variables is set to 'safe'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2603. The...

DSA-2603-1 emacs23 - programming error

Bulletin has no description...

Debian: Security Advisory (DSA-2603-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.10 / 12.04 LTS : emacs23 vulnerabilities (USN-1586-1)

Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. CVE-2012-0035 Paul Ling discovered that Emacs incorrectly handled...

USN-1586-1: Emacs vulnerabilities

Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. CVE-2012-0035 Paul Ling discovered that Emacs incorrectly handled...

Code injection

lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file...

CVE-2012-3479

lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file...

CVE-2012-3479

lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file...

CVE-2012-0035

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file...