Security update for haproxy (moderate)

openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2019:2556-1 Rating: moderate References: 1142529 Cross-References: CVE-2019-14241 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for haproxy ...

Security update for haproxy (moderate)

openSUSE Security Update: Security update for haproxy Announcement ID: openSUSE-SU-2019:2555-1 Rating: moderate References: 1142529 Cross-References: CVE-2019-14241 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for haproxy ...

UBUNTU-CVE-2019-15918

An issue was discovered in the Linux kernel before 5.0.10. SMB2negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21...

OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)

The JGSS component of OpenJDK ignores the value of the javax.security.auth.useSubjectCredsOnly property when using HTTP/SPNEGO authentication and always uses global credentials. It was discovered that this could cause global credentials to be unexpectedly used by an untrusted Java application...

[SECURITY] Fedora 25 Update: jetty-alpn-8.1.11-2.v20170118.fc25

A pure JavaTM implementation of the Application Layer Protocol Negotiation TLS Extension...

MGASA-2017-0081 Updated firefox packages fix security vulnerability

Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2017-5398, CVE-2017-5400, CVE-2017-5401, CVE-2017-5402,...

Updated quassel packages fix CVE-2016-4414

Updated quassel packages fix security vulnerability: It was found that quasselcore is vulnerable to a denial of service attack by unauthenticated clients. The protocol negotiation did not take into account lack of a match in handshake data, in which case PeerFactory::createPeer returns a nullptr,...

Quassel IRC Denial of Service Vulnerability

Quassel IRC aka Quassel is a cross-platform distributed IRC chat client developed by the Quassel IRC team, which is developed using the QT application framework and a PostgreSQL database to store data. A denial of service vulnerability exists in Quassel IRC's core. Due to the program does not...

TLS NPN Supported Protocol Enumeration

The remote host supports the TLS NPN Transport Layer Security Next Protocol Negotiation extension. This plugin enumerates the protocols the extension supports. TRUSTED...

stunnel – an SSL encryption wrapper

The stunnel program is designed to work as an SSL encryption wrapper between remote client and local inetd-startable or remote server. It can be used to add SSL functionality to commonly used inetd daemons like POP2, POP3, and IMAP servers without any changes in the programs’ code. Stunnel uses t...

openssl: client NULL dereference crash on malformed handshake packets

The ssl3takemac function in ssl/s3both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service NULL pointer dereference and application crash via a crafted Next Protocol Negotiation record in a TLS handshake...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

DEBIAN-CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

Design/Logic Flaw

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

PT-2014-2243

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.3.24-rc Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and daemon exit, by performing link protocol negotiation incorrectly. Recommendations For versions...

CVE-2012-2250: Undefined Security Weakness

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

openssl: client NULL dereference crash on malformed handshake packets

The ssl3takemac function in ssl/s3both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service NULL pointer dereference and application crash via a crafted Next Protocol Negotiation record in a TLS handshake...