dhclient, dhcp security update

CentOS Errata and Security Advisory CESA-2016:2590 An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

openSUSE Security Update : ImageMagick (openSUSE-2016-1282)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

RedHat Update for dhcp RHSA-2016:2590-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : dhcp (RHSA-2016:2590)

An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Moderate: Red Hat Security Advisory: dhcp security, bug fix, and enhancement update

An update for dhcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-308-02A Schneider Electric Magelis HMI Resource Consumption Vulnerabilities that was published November 22, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of a public report of resource consumption...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

SUSE-SU-2016:2667-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

CVE-2016-8666: Uncontrolled Resource Consumption

The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service stack consumption and panic or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a...

How Do I Monitor NetScaler MAS Resource Consumption?

This article describes how to monitor NetScaler MAS resource consumption. Background NetScaler Management and Analytics System is a single unified solution that helps administrators perform various tasks such as infrastructure management, application management, orchestration, and gives complete...

CVE-2016-6307: Uncontrolled Resource Consumption

The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service memory consumption via crafted TLS messages, related to statem/statem.c and statem/statemlib.c...

PT-2016-7158

Name of the Vulnerable Software and Affected Versions Huawei iBMC versions prior to V100R003C00SPC613 in RH1288 V3 servers Huawei iBMC versions prior to V100R003C00SPC617 in RH2288 V3 servers Huawei iBMC versions prior to V100R003C00SPC515 in RH2288H V3 servers Huawei iBMC versions prior to...

CVE-2016-6900: Undefined Security Weakness

The Intelligent Baseboard Management Controller iBMC in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; a...

PT-2016-3168

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF End of File check in the rl2 read header function, which can cause huge CPU and memory consumption. This occurs when a crafted RL2 file with a large frame count field in...

PT-2016-3166

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF check in the cine read header function, which can cause huge CPU and memory consumption. This occurs when a crafted CINE file with a large "duration" field in the header...

PT-2016-3167

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an End of File EOF check in the asf read marker function, which can cause significant CPU and memory consumption. This occurs when a crafted ASF file with a large "name len" or...

Wireshark 1.12.x < 1.12.13 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.12.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.13 advisory. - The NDS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet on...

Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-308-02A Schneider Electric Magelis HMI Resource Consumption Vulnerabilities that was published November 22, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of a public report of resource consumption...

MediaWiki < 1.19.24 / 1.23.9 / 1.24.2 Multiple Vulnerabilities

Binary data 9471.prm...

Debian Security Advisory DSA 3627-1 (phpmyadmin - security update)

Several vulnerabilities have been fixed in phpMyAdmin, the web-based MySQL administration interface. CVE-2016-1927 The suggestPassword function relied on a non-secure random number generator which makes it easier for remote attackers to guess generated passwords via a brute-force approach...