SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

SUSE-SU-2016:2667-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

CVE-2016-8666: Uncontrolled Resource Consumption

The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service stack consumption and panic or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a...

How Do I Monitor NetScaler MAS Resource Consumption?

This article describes how to monitor NetScaler MAS resource consumption. Background NetScaler Management and Analytics System is a single unified solution that helps administrators perform various tasks such as infrastructure management, application management, orchestration, and gives complete...

CVE-2016-6307: Uncontrolled Resource Consumption

The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service memory consumption via crafted TLS messages, related to statem/statem.c and statem/statemlib.c...

CVE-2016-6900: Undefined Security Weakness

The Intelligent Baseboard Management Controller iBMC in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515; RH5885 V3 servers with software before V100R003C10SPC102; a...

PT-2016-7158

Name of the Vulnerable Software and Affected Versions Huawei iBMC versions prior to V100R003C00SPC613 in RH1288 V3 servers Huawei iBMC versions prior to V100R003C00SPC617 in RH2288 V3 servers Huawei iBMC versions prior to V100R003C00SPC515 in RH2288H V3 servers Huawei iBMC versions prior to...

PT-2016-3167

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an End of File EOF check in the asf read marker function, which can cause significant CPU and memory consumption. This occurs when a crafted ASF file with a large "name len" or...

PT-2016-3168

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF End of File check in the rl2 read header function, which can cause huge CPU and memory consumption. This occurs when a crafted RL2 file with a large frame count field in...

PT-2016-3166

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an EOF check in the cine read header function, which can cause huge CPU and memory consumption. This occurs when a crafted CINE file with a large "duration" field in the header...

Wireshark 1.12.x < 1.12.13 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.12.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.13 advisory. - The NDS dissector could crash. It may be possible to make Wireshark crash by injecting a malformed packet on...

Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-308-02A Schneider Electric Magelis HMI Resource Consumption Vulnerabilities that was published November 22, 2016, on the NCCIC/ICS-CERT web site. ICS-CERT is aware of a public report of resource consumption...

MediaWiki < 1.19.24 / 1.23.9 / 1.24.2 Multiple Vulnerabilities

Binary data 9471.prm...

Debian: Security Advisory (DSA-3627-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 3627-1 (phpmyadmin - security update)

Several vulnerabilities have been fixed in phpMyAdmin, the web-based MySQL administration interface. CVE-2016-1927 The suggestPassword function relied on a non-secure random number generator which makes it easier for remote attackers to guess generated passwords via a brute-force approach...

CVE-2016-4057

Huawei FusionCompute is affected by CVE-2016-4057: a DoS vulnerability in FusionCompute prior to V100R005C10SPC700 allows remote authenticated users to exhaust resources by sending a high volume of crafted packets, causing service disruption. The issue originates from a vulnerability in handling ...

CVE-2016-4057: Undefined Security Weakness

Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service resource consumption via a large number of crafted packets...

Zabbix < 2.2.12 / 2.4.8 / 3.0.1 charts.php 'stime' Parameter Resource Consumption Remote DoS

According to its self-reported version number, the instance of Zabbix running on the remote host is affected by a denial of service vulnerability due to improper sanitization of user-supplied input to the 'stime' parameter in the 'charts.php' script. A remote attacker can exploit this issue to...

USN-2994-1 libxml2 vulnerabilities | Cloud Foundry

USN-2994-1 libxml2 vulnerabilities Medium Vendor GNOME XML library, Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description Multiple researchers discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated system were tricked into opening a...

Xxe

XML external entity XXE vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...