Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.11 update

An update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

CVE-2016-7796

The managerdispatchnotifyfd function in systemd allows local users to cause a denial of service system hang via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled...

SUSE-SU-2016:2476-1 Security update for systemd

This update for systemd fixes the following security issue: - CVE-2016-7796: A zero-length message received over systemd's notification socket could make managerdispatchnotifyfd return an error and, as a side effect, disable the notification handler completely. As the notification socket is...

SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2016:2399-1)

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable...

[slackware-security] bind

New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.10.4P3-i586-1slack14.2.txz: Upgraded. This update fixes a denial-of-service vulnerability. Testi...

SUSE-SU-2016:2399-1 Security update for bind

The nameserver bind was updated to fix a remote denial of service vulnerability, where a crafted packet could cause the nameserver to abort. CVE-2016-2776, bsc1000362...

ACROS Security 0patch (0PatchServicex64.exe) Service Path Elevation of Privilege Vulnerability

0patch is a platform with fast distribution and the ability to add and remove patches without restarting the process. An elevation of privilege vulnerability exists in the 0patchservice service in 0patch version 2016.05.19.539. A local attacker can exploit the vulnerability to elevate privileges...

CVE-2016-7166

libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...

Cisco ASA DHCPv6 Relay DoS (cisco-sa-20151021-asa-dhcp1)

According to its version and configuration, the remote Cisco Adaptive Security Appliance ASA device is affected by a denial of service vulnerability in the DHCPv6 relay feature due to improper validation of DHCPv6 packets. An unauthenticated, remote attacker can exploit this, via specially crafte...

PHP Null Pointer Reference Remote Denial of Service Vulnerability

PHP is a new language for writing CGI programs. A remote denial of service vulnerability exists in PHP null pointer references. An attacker can exploit the vulnerability to launch a denial of service attack...

CVE-2016-6132

The gdImageCreateFromTgaCtx function in the GD Graphics Library aka libgd before 2.2.3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TGA file...

Foxit Reader < 7.2.2 Multiple Vulnerabilities

Binary data 9459.prm...

IBM WebSphere Application Server Denial of Service Vulnerability (CNVD-2016-05996)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. IBM WebSphere Application Server suffers from a denial of...

Wireshark MMSE Dissector Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A remote denial of service vulnerability exists in Wireshark versions 1.12.0 through 1.12.12, which can be exploited by an attacker to crash an application and cause a denial of...

Wireshark 'epan/dissectors/packet-packetbb.c' Remote Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability in Wireshark 'epan/dissectors/packet-packetbb.c' allows remote attackers to conduct a denial of service by submitting a special request to crash the application...

Wireshark WSP Dissector 'epan/dissectors/packet-wsp.c' Remote Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark versions 2.0.0 through 2.0....

Wireshark 'add_capabilities()' function remote denial of service vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A remote denial of service vulnerability exists in Wireshark versions 2.0.0 through 2.0....

DSA-3611-1 libcommons-fileupload-java - security update

Bulletin has no description...

OracleVM 3.2 : openldap (OVMSA-2016-0069)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-6908 openldap: bergetnext denial of service vulnerability 1263170 - fix: syncprov psearch race condition 999811 - fix: CVE-2013-4449 segfault on certain queries with rwm overlay 1064146 - fix...

CVE-2016-4447

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service heap-based buffer underread and application crash via a crafted file, involving xmlParseName...