Amazon Linux: Security Advisory (ALAS-2016-695)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : openssl (ALAS-2016-695)

A vulnerability was discovered that allows a man-in-the-middle attacker to use a padding oracle attack to decrypt traffic on a connection using an AES CBC cipher with a server supporting AES-NI. CVE-2016-2107 , Important It was discovered that the ASN.1 parser can misinterpret a large universal t...

UBUNTU-CVE-2015-4522

The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...

libtiff 3.9.5 - Integer Overflow

/ Exploit Title: libtiff include include include "tiffio.h" int tiffintegeroverflowtest TIFF tif = TIFFOpen"/home/x90c/samplespp.tif", "r"; int samples = 0; / for instance, TIFFGetField library function will called with malicious samplesperpixel field value TIFFGetField got segfault! /...

DEBIAN-CVE-2012-4433

Multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large 1 width or 2 height value in a Portable Pixel Map ppm image, which triggers a...

flash-plugin: arbitrary code exec via integer overflow in copyRawDataTo method in Matrix3D class

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments...

CentOS Update for xen CESA-2011:1401 centos5 i386

Check for the Version of xen OpenVAS Vulnerability Test CentOS Update for xen CESA-2011:1401 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Fedora 14 : tor-0.2.1.29-1400.fc14 (2011-0642)

Mon Jan 17 2011 Enrico Scholz - 0.2.1.29-1400 - updated to 0.2.1.29 SECURITY - CVE-2011-0427: heap overflow bug, potential remote code execution - Tue Dec 21 2010 Luke Macken - 0.2.1.28-1400 - updated to 0.2.1.28 SECURITY: fixes a remotely exploitable heap overflow bug - Fri Nov 26 2010 Enrico...

Fedora 12 : opendchub-0.8.2-2.fc12 (2010-6415)

Fix for stack overflow bug. CVE ID: CVE-2010-1147 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 11 FEDORA-2009-8993 (xemacs)

The remote host is missing an update to xemacs announced via advisory FEDORA-2009-8993. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 9 : nsd-3.2.2-1.fc9 (2009-5190)

Security release. A one-byte overflow bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits. http://www.nlnetlabs.nl/publications/NSDvulnerabilityannouncement.ht ml Note that Tenable Network Securi...

Fedora 10 : nsd-3.2.2-2.fc10 (2009-5191)

Security release. A one-byte overflow bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits. http://www.nlnetlabs.nl/publications/NSDvulnerabilityannouncement.ht ml Note that Tenable Network Securi...

[ GLSA 200904-19 ] LittleCMS: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200904-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Debian Security Advisory DSA 033-1 (analog)

The remote host is missing an update to analog announced via advisory DSA 033-1. OpenVAS Vulnerability Test $Id: deb0331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 033-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 143-1 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 143-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: perl security update

Updated Perl packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Perl is a high-level programming language commonly used for system administration utilitie...

openssl096b, wget security update

CentOS Errata and Security Advisory CESA-2005:830 Updated wget packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. GNU Wget is a file retrieval utility that can use either the HTTP or FTP...

sharutils security update

CentOS Errata and Security Advisory CESA-2005:377-01 An updated sharutils package is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The sharutils package contains a set of tools for encoding and decoding packages of files in binary o...

gaim security update

CentOS Errata and Security Advisory CESA-2005:365 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-April/073719.html https://lists.centos.org/pipermail/centos-announce/2005-April/073720.html...