privoxy: denial of service

CVE-2015-1380 denial of service Denial of service issue was found in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort. - CVE-2015-1381 segmentation fault Multiple segmentation faults and...

[SECURITY] [DLA 142-1] privoxy security update

Package : privoxy Version : 3.0.16-1+deb6u1 CVE ID : CVE-2015-1031 CVE-2015-1381 CVE-2015-1382 Several vulnerabilities have been fixed in privoxy, a privacy enhancing HTTP proxy: CVE-2015-1031, CID66394: unmap: Prevent use-after-free if the map only consists of one item. CVE-2015-1031, CID66376 a...

DLA-142-1 privoxy - security update

Bulletin has no description...

MGASA-2015-0042 Updated privoxy packages fix security vulnerabilities

Updated privoxy packages fix security issues: Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort. Fixed multiple segmentation faults and memory leaks in the pcrs code. This...

Updated privoxy packages fix security vulnerabilities

Updated privoxy packages fix security issues: Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort. Fixed multiple segmentation faults and memory leaks in the pcrs code. This...

privoxy -- multiple vulnerabilities

Privoxy Developers reports: Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort. Reported by Matthew Daley. CVE-2015-1380. Fixed multiple segmentation faults and memory leaks...

coreutils security, bug fix, and enhancement update

8.4-31.0.1 - clean up empty file if cp is failed Orabug 15973168 8.4-31 - adjust the fix for the du bindmounts failure836557 Mon Oct 07 2013 Ondrej Oprala = 32. Also line numbers are consistently padded with spaces, rather than with zeros for certain widths. 997537 8.4-24 - fix su return codes wh...

Ruby: Ruby: Heap Overflow in Floating Point Parsing

Any time a string is converted to a floating point value, a specially crafted string can cause a heap overflow. This can lead to a denial of service attack via segmentation faults and possibly arbitrary code execution. Any program that converts input of unknown origin to floating point values...

ruby -- Heap Overflow in Floating Point Parsing

Ruby developers report: Any time a string is converted to a floating point value, a specially crafted string can cause a heap overflow. This can lead to a denial of service attack via segmentation faults and possibly arbitrary code execution. Any program that converts input of unknown origin to...

SuSE 11.2 / 11.3 Security Update : coreutils (SAT Patch Numbers 8334 / 8336)

This coreutils update fixes three minor security issues : - VUL-1: CVE-2013-0221: segmentation fault in 'sort -d' and 'sort -M' with long line input. bnc798538 - VUL-1: CVE-2013-0222: segmentation fault in 'uniq' with long line input. bnc796243 - VUL-1: CVE-2013-0223: segmentation fault in 'join...

Fedora 17 : coreutils-8.15-10.fc17 (2013-1804)

fix multiple segmantation faults in i18n patch by SUSE 869442, 902917- CVE2013-0223/CVE2013-0221/CVE2013-0222 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 18 : coreutils-8.17-8.fc18 (2013-1455)

fix multiple segmantation faults in i18n patch by SUSE 869442, 902917- CVE2013-0223/CVE2013-0221/CVE2013-0222 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Mandriva Update for libalsa2 MDVA-2010:227 (libalsa2)

Check for the Version of libalsa2 OpenVAS Vulnerability Test Mandriva Update for libalsa2 MDVA-2010:227 libalsa2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:227 : libalsa2

This is a bugfix and maintenance update bundle that addresses various issues in a number of packages. Some thread-related problems were found in the libalsa2 library that could cause segmentation faults in some audio applications one example being phonon when used with gstreamer output and...

ruby -- BigDecimal denial of service vulnerability

The official ruby site reports: A denial of service DoS vulnerability was found on the BigDecimal standard library of Ruby. Conversion from BigDecimal objects into Float numbers had a problem which enables attackers to effectively cause segmentation faults. An attacker can cause a denial of servi...

RedHat Update for bind RHSA-2008:0300-02

Check for the Version of bind OpenVAS Vulnerability Test RedHat Update for bind RHSA-2008:0300-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Sun Solaris 'snoop(1M)' Utility Multiple Remote Vulnerabilities

The Solaris 'snoop1M' network utility is prone to multiple remote vulnerabilities, including: - Multiple stack-based buffer-overflow vulnerabilities - Multiple format-string vulnerabilities Exploiting these issues will allow attackers to execute arbitrary code with the privileges of the 'nobody'...

RHEL 5 : bind (RHSA-2008:0300)

"Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementatio...

[SECURITY] [DSA 887-1] New ClamAV packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 887-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

squid -- DoS on failed PUT/POST requests vulnerability

The squid patches page notes: An inconsistent state is entered on a failed PUT/POST request making a high risk for segmentation faults or other strange errors...