155 matches found
Microsoft Windows Multiple Vulnerabilities (KB4550922)
This host is missing a critical security update according to Microsoft KB4550922 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4550929)
This host is missing a critical security update according to Microsoft KB4550929 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4550927)
This host is missing a critical security update according to Microsoft KB4550927 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
April 14, 2020âKB4550951 (Monthly Rollup)
April 14, 2020âKB4550951 Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Note IMPORTANT Verify that you have installed the required updates listed in the How to get this update section before installing this update. Note IMPORTANT WSUS scan cab files will continue to be available for...
PT-2020-2192
Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows Update Stack of Windows operating systems. This can be exploited by an attacker to elevate their...
PT-2020-2273
Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description The issue is related to an elevation of privilege vulnerability that occurs when the Windows Update Stack fails to properly handle objects in memory. This can potentially allow a...
March 10, 2020âKB4540689 (OS Build 17134.1365)
March 10, 2020âKB4540689 OS Build 17134.1365 Applies To Windows 10, version 1803, all editions Note Windows 10, version 1803 the April 2018 Update Home and Pro editions have reached end of service. For Windows 10 devices that are at, or within several months of reaching end of service, Windows...
SUSE SLED12 / SLES12 Security Update : screen (SUSE-SU-2019:1354-1)
This update for screen fixes the following issues : Security issue fixed : CVE-2015-6806: Fixed a stack overflow due to deep recursion bsc944458. Non-security issue fixed: Fixed segmentation faults related to altscreen and resizing screen bsc1130831. Note that Tenable Network Security has extract...
Security update for libzypp, zypper (important)
The Software Update Stack was updated to receive fixes and enhancements. libzypp: - Adapt to work with GnuPG 2.1.23. bsc1054088 - Support signing with subkeys. bsc1008325 - Enhance sort order for media.1/products. bsc1054671 zypper: - Also show a gpg key's subkeys. bsc1008325 - Improve signature...
Security update for libzypp (important)
The Software Update Stack was updated to receive fixes and enhancements. libzypp: - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. bsc1045735, bsc1038984 - Fix gpg-pubkey release creation time computation. bsc1036659 - Update...
openSUSE Security Update : libzypp / zypper (openSUSE-2017-893)
The Software Update Stack was updated to receive fixes and enhancements. libzypp : Security issues fixed : - CVE-2017-7435, CVE-2017-7436, CVE-2017-9269: Fix GPG check workflows, mainly for unsigned repositories and packages. bsc1045735, bsc1038984 Bug fixes : - Re-probe on refresh if the...
Updated jbigkit packages fix CVE-2013-6369
Updated jbigkit packages fix security vulnerability: Florian Weimer found a stack-based buffer overflow flaw in the libjbig library part of jbigkit. A specially-crafted image file read by libjbig could be used to cause a program linked to libjbig to crash or, potentially, to execute arbitrary cod...
DEBIAN-CVE-2013-6426
The cloudformation-compatible API in OpenStack Orchestration API Heat before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and 1 create a stack via the CreateStack method or 2 upda...
glibc security update
2.12-1.7.el60.5 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536...
Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2
Background Xpdf is an open source viewer for Portable Document Format PDF files. GPdf is a Gnome-based PDF viewer that includes some Xpdf code. Description iDEFENSE reports that the Decrypt::makeFileKey2 function in Xpdf's Decrypt.cc insufficiently checks boundaries when processing /Encrypt /Leng...