5604 matches found
CVE-2018-5380
Removed by vendor...
SUSE-SU-2018:0456-1 Security update for quagga
This update for quagga fixes the security following issues: - The Quagga BGP daemon contained a bug in the ASPATH size calculation that could have been exploited to facilitate a remote denial-of-service attack via specially crafted BGP UPDATE messages. CVE-2017-16227, bsc1065641 - The Quagga BGP...
USN-3573-1: Quagga vulnerabilities
It was discovered that a double-free vulnerability existed in the Quagga BGP daemon when processing certain forms of UPDATE message. A remote attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2018-5379 It was discovered that the Quagga BGP daemon did not...
Ubuntu 14.04 LTS / 16.04 LTS : Quagga vulnerabilities (USN-3573-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3573-1 advisory. It was discovered that a double-free vulnerability existed in the Quagga BGP daemon when processing certain forms of UPDATE message. A remote...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by an operation that goes beyond the buffer boundaries in memory, allowing an attacker to trigger a service failure.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird arise from an operation that goes beyond the buffer boundaries in memory when reading certificates from the disk. Exploiting these vulnerabilities can allow a malicious actor to cause service failures using...
[slackware-security] rsync
New rsync packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/rsync-3.1.3-i586-1slack14.2.txz: Upgraded. This update fixes two security issues: Fixed a buffer overru...
The vulnerability of the Sentinel LDK RTE platform for software protection and licensing arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to trigger a service failure.
The vulnerability of the Sentinel LDK RTE platform for software protection and licensing stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...
openSUSE Security Update : curl (openSUSE-2018-56)
This update for curl fixes the following issues : Security issues fixed : - CVE-2017-8816: Buffer overrun flaw in the NTLM authentication code bsc1069226. - CVE-2017-8817: Read out of bounds flaw in the FTP wildcard function bsc1069222. This update was imported from the SUSE:SLE-12:Update update...
The vulnerability of the APFS component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the APFS component in the Mac OS X operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption...
The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.
The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...
The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.
The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...
The vulnerability of VMware NAT hypervisors in VMware Workstation and VMware Fusion allows a hacker to execute arbitrary code on the host operating system.
The vulnerability of the VMware NAT service vmnat.exe in VMware Workstation and VMware Fusion stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating locally on the guest operating system, to execute arbitrary code on the...
The vulnerability of the CFNetwork component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.
The vulnerability of the CFNetwork component in the Mac OS X operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to trigger a service failure...
Vulnerability of Microsoft Word text editor, the Microsoft Office Compability Pack, and other Microsoft Office programs, caused by an operation that goes beyond the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Word, the Microsoft Office Compability Pack, and other Microsoft Office programs arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current...
Vulnerability of the JavaScript ChakraCore kernel, Internet Explorer and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights
The vulnerability in the JavaScript ChakraCore engine, as well as in browsers Internet Explorer and Microsoft Edge, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...
SUSE-SU-2018:0122-1 Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2017-8816: Buffer overrun flaw in the NTLM authentication code bsc1069226. - CVE-2017-8817: Read out of bounds flaw in the FTP wildcard function bsc1069222...
Debian: Security Advisory (DLA-883-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 27 : LibRaw (2017-f04296e37e)
Patch for CVE-2017-14348 ---- Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data ---- LibRaw 0.18.3 Fix for CVE-2017-13735 Additional checks for X-Trans CFA pattern data ---- Patch for CVE-2017-13735. Note...
Fedora 27 : LibRaw (2017-0348398d64)
Fix for possible buffer overrun in kodak65000 decoder Fix for possible heap overrun in Canon makernotes parser Fix for CVE-2017-13735 CVE-2017-14265: Additional check for X-Trans CFA pattern data Note that Tenable Network Security has extracted the preceding description block directly from the...
The vulnerability of the list_files function in the Info-ZIP Unzip file archiver allows a hacker to trigger a service failure.
The vulnerability of the listfiles function in the Info-ZIP Unzip file archiver arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures through mechanisms related to compression methods...