Security and Quality Rollup updates for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 (KB 4481486)

Security and Quality Rollup updates for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 KB 4481486 Applies to: Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.0 Service Pack 2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6 Summary...

EulerOS 2.0 SP2 : zsh (EulerOS-SA-2018-1424)

According to the versions of the zsh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zsh: buffer overflow when scanning very long directory paths for symbolic links CVE-2014-10072 - zsh: Stack-based buffer overflow in exec.c:hashcmd...

EulerOS 2.0 SP2 : libcdio (EulerOS-SA-2018-1418)

According to the versions of the libcdio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libcdio: Heap-based buffer over-read in printiso9660recurse function in iso-info.c CVE-2017-18198 - libcdio: NULL pointer dereference in...

EulerOS 2.0 SP2 : glusterfs (EulerOS-SA-2018-1441)

According to the version of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - glusterfs: Improper deserialization in dict.c:dictunserialize can allow attackers to read arbitrary memory CVE-2018-10911 Note that Tenable...

EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2018-1425)

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - null dereference in kadmind or DN container check bypass by supplying special crafted data CVE-2018-5729 - DN container check bypass by supplying...

EulerOS 2.0 SP2 : libmspack (EulerOS-SA-2018-1435)

According to the versions of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks CVE-2018-14679 - libmspack: off-by-one error in the CHM chunk...

EulerOS 2.0 SP2 : ghostscript (EulerOS-SA-2018-1430)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ghostscript: /invalidaccess bypass after failed restore.CVE-2018-16509 - ghostscript: LockDistillerParams type confusion.CVE-2018-15910 -...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2018-1417)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - jasper: reachable assertion in JPCNOMINALGAIN CVE-2016-9396 - jasper: NULL pointer exception in jp2encode CVE-2017-1000050 Note that Tenable...

EulerOS 2.0 SP2 : openssl (EulerOS-SA-2018-1420)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - openssl: ROHNP - Key Extraction Side Channel in Multiple Crypto Libraries CVE-2018-0495 - openssl: Malicious server can send large prime to...

Design/Logic Flaw

An issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/selectimagespost.php allows remote attackers to upload and execute arbitrary PHP code via a double extension and a modified ".php" substring, in conjunction with the image/jpeg content type, as demonstrated by the...

CVE-2018-20129

Summary: CVE-2018-20129 affects DedeCMS v5.7 SP2 in uploads/include/dialog/select_images_post.php, enabling uploaded PHP code execution via a crafted filename using a double extension and manipulated ".php" substring, in conjunction with image/jpeg content type. The vulnerability mechanism is a f...

CVE-2018-17952

Cross site scripting vulnerability in eDirectory prior to 9.1 SP2...

Microsoft .NET Framework Multiple Vulnerabilities (KB4470640)

This host is missing a critical security update according to Microsoft KB4470640 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Description of the Security and Quality Rollup for .NET Framework 3.5 SP1 for Windows Server 2008 SP2 (KB 4471102)

Description of the Security and Quality Rollup for .NET Framework 3.5 SP1 for Windows Server 2008 SP2 KB 4471102 Applies to: Microsoft .NET Framework 3.5 Service Pack 1 Summary This security update resolves a vulnerability in Microsoft .NET Framework that could allow remote code execution when...

Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1 and for .NET Framework 4.6 for Windows Server 2008 SP2 (KB 4470500)

None None...

Security Only updates for .NET Framework 3.5 SP1, 4.5.2, and 4.6 for Windows Server 2008 SP2 (KB 4471984)

Security Only updates for .NET Framework 3.5 SP1, 4.5.2, and 4.6 for Windows Server 2008 SP2 KB 4471984 Applies to: Microsoft .NET Framework 3.5 Service Pack 1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6 Summary This security update resolves a vulnerability in Microsoft .NET...

October 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 (KB 4462503)

October 2018 Preview of the Quality Rollups for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 SP2 KB 4462503 Applies to: Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.0 Service Pack 2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6...

Security update for openssh (moderate)

This update for openssh fixes the following issues: Following security issues have been fixed: - CVE-2018-15473: OpenSSH was prone to a user existance oracle vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully...

openSUSE Security Update : openssh (openSUSE-2018-1477)

This update for openssh fixes the following issues : Following security issues have been fixed : - CVE-2018-15473: OpenSSH was prone to a user existance oracle vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully...

Security update for systemd (important)

This update for systemd fixes the following issues: Security issues fixed: - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in unitdeserializ...