CVE-2013-3415

Cisco Adaptive Security Appliance ASA Software 8.4.x before 8.43 and 8.6.x before 8.61.3 does not properly manage memory upon an AnyConnect SSL VPN client disconnection, which allows remote attackers to cause a denial of service memory consumption, and forwarding outage or system hang via packets...

PT-2013-4372 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.4.x before 8.43 Cisco Adaptive Security Appliance ASA Software versions 8.6.x before 8.61.3 Description: The issue arises from improper memory management when an AnyConnect SSL VPN...

Amazon Linux AMI : kernel (ALAS-2012-142)

A use-after-free flaw was found in the Linux kernel's memory management subsystem in the way quota handling for huge pages was performed. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges. CVE-2012-2133 , Moderate A use-after-fr...

CVE-2011-4607

PuTTY 0.59–0.61 is affected by an information-disclosure issue: sensitive memory may not be cleared during keyboard-interactive authentication, potentially allowing a local attacker to read login passwords from the process memory. Sources confirm the affected versions and local-impact disclosure....

CVE-2013-4208

The rsaverify function in PuTTY before 0.63 1 does not clear sensitive process memory after use and 2 does not free certain structures containing sensitive process memory, which might allow local users to discover private RSA and DSA keys...

CVE-2013-4208

CVE-2013-4208 affects PuTTY up to version 0.63 where rsa_verify mishandles sensitive memory and does not free certain structures, potentially exposing private RSA/DSA keys. Several advisories note updates that merge PuTTY fixes into downstream projects (e.g., FileZilla 3.7.3 and Fedora/OpenSUSE a...

SuSE 11.2 Security Update : java-1_6_0-openjdk (SAT Patch Number 8084)

java-160-openjdk has been updated to Icedtea6-1.12.6 version. Security fixes : - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450:...

Oracle Linux 4 : cups (ELSA-2008-0161)

From Red Hat Security Advisory 2008:0161 : Updated cups packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a...

[SECURITY] [DSA 2714-1] kfreebsd-9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2714-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 25, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2714-1 (kfreebsd-9 - programming error)

Konstantin Belousov and Alan Cox discovered that insufficient permission checks in the memory management of the FreeBSD kernel could lead to privilege escalation. OpenVAS Vulnerability Test $Id: deb2714.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2714-1 using nvtgen...

DSA-2714-1 kfreebsd-9 - programming error

Bulletin has no description...

Debian: Security Advisory (DSA-2714-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a craft...

CVE-2013-1339

Summary (CVE-2013-1339): The Windows Print Spooler component has a memory management flaw during deletion of printer connections across affected Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT). This allows remote authenticated users to execu...

CVE-2013-1339: Undefined Security Weakness

The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a craft...

buffer_overflow

This plugin finds buffer overflow vulnerabilities. Users have to know that detecting a buffer overflow vulnerability will be only possible if the server is configured to return errors, and the application is developed in cgi-c or some other language that allows the programmer to do their own memo...

kernel: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs

The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests...

1

kernel 2.6.18-348.6.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

Design/Logic Flaw

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136: Undefined Security Weakness

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...