CVE-2016-6304

Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service memory consumption via large OCSP Status Request extensions...

UBUNTU-CVE-2016-6304

Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service memory consumption via large OCSP Status Request extensions...

CVE-2016-6304

Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service memory consumption via large OCSP Status Request extensions...

SUSE-SU-2016:2285-1 Security update for apache2-mod_nss

This update provides apache2-modnss 1.0.14, which brings several fixes and enhancements: - Fix OpenSSL ciphers stopped parsing at +. CVE-2016-3099 - Created valgrind suppression files to ease debugging. - Implement SSLPPTYPEFILTER to call executables to get the key password pins. - Improvements t...

SUSE SLES11 Security Update : glibc (SUSE-SU-2016:2156-1)

This update for glibc fixes the following issues : - Drop old fix that could break services that start before IPv6 is up. bsc931399 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Relocate DSOs in dependency order, fixin...

glibc: denial of service

CVE-2016-3075 denial of service The getnetbyname implementation in nssdns contains a potentially unbounded alloca call in the form of a call to strdupa, leading to a stack overflow stack exhaustion and a crash if getnetbyname is invoked on a very long name. - CVE-2016-5417 denial of service The...

Fedora 24 : 2:qemu (2016-f13ea849c5)

CVE-2016-4020: memory leak in kvmvapic.c bz 1326904 - CVE-2016-4439: scsi: esb: OOB write 1 bz 1337503 - CVE-2016-4441: scsi: esb: OOB write 2 bz 1337506 - Fix regression installing windows 7 with qxl/vga bz 1339267 - Fix crash with aarch64 gic-version=host and accel=tcg bz 1339977 Note that...

SUSE-SU-2016:1782-1 Security update for ImageMagick

ImageMagick was updated to fix 55 security issues. These security issues were fixed: - CVE-2014-9810: SEGV in dpx file handler bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...

Debian DLA-533-1 : php5 security update

CVE-2016-5093.patch Absence of null character causes unexpected zendstring length and leaks heap memory. The test script uses localegetprimarylanguage to reach geticuvalueinternal but there are some other functions that also trigger this issue: localecanonicalize, localefiltermatches,...

USN-3019-1 linux-lts-utopic vulnerabilities

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...

OracleVM 3.2 : openldap (OVMSA-2016-0069)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-6908 openldap: bergetnext denial of service vulnerability 1263170 - fix: syncprov psearch race condition 999811 - fix: CVE-2013-4449 segfault on certain queries with rwm overlay 1064146 - fix...

Debian DLA-516-1 : linux security update

This update fixes the CVEs described below. CVE-2016-0821 Solar Designer noted that the list 'poisoning' feature, intended to mitigate the effects of bugs in list manipulation in the kernel, used poison values within the range of virtual addresses that can be allocated by user processes...

CVE-2013-7456 and CVE-2016-5093 PHP vulnerabilities | Cloud Foundry

CVE-2013-7456 and CVE-2016-5093 PHP vulnerabilities Low Vendor PHP Versions Affected Cloud Foundry PHP buildpack versions prior to 4.3.14 Description Several out-of-bounds reads were discovered in PHP and its dependencies that could cause memory leaks or other unexpected conditions. Mitigation...

MGASA-2016-0215 Updated libgd packages fix security vulnerabilities

Updated libgd packages fix security vulnerabilities: The gdImageScaleTwoPass function in gdinterpolation.c in libgd before 2.2.0 uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated by a...

RHEL 6 : ntp (RHSA-2016:0780)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0780 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. These packages include the ntpd...

Ubuntu: Security Advisory (USN-2934-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2934-1: Thunderbird vulnerabilities

Bob Clary, Christoph Diehl, Christian Holler, Andrew McCreight, Daniel Holbert, Jesse Ruderman, and Randell Jesup discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denia...

Debian DSA-3547-1 : imagemagick - security update

Several vulnerabilities were discovered in Imagemagick, a program suite for image manipulation. This update fixes a large number of potential security problems such as NULL pointer access and buffer-overflows that might lead to memory leaks or denial of service. None of these security problems ha...

[SECURITY] [DSA 3547-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3547-1 [email protected] https://www.debian.org/security/ Luciano Bello April 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3547-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3547-1 [email protected] https://www.debian.org/security/ Luciano Bello April 11, 2016 https://www.debian.org/security/faq -...