2896 matches found
[SECURITY] [DLA 1163-1] apr-util security update
Package : apr-util Version : 1.4.1-3+deb7u1 CVE ID : CVE-2017-12618 Debian Bug : 879996 It was discovered that there was an out-of-bounds read access in apr-util, a support/portability library used by many applications. A local user with write access to the database could have made a process usin...
DLA-1163-1 apr-util - security update
Bulletin has no description...
[ASA-201710-33] apr-util: denial of service
Arch Linux Security Advisory ASA-201710-33 ========================================== Severity: Low Date : 2017-10-27 CVE-ID : CVE-2017-12618 Package : apr-util Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-468 Summary ======= The package apr-util before version...
CVE-2017-12618
Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...
CVE-2017-12618
Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...
Out-of-bounds
Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...
CVE-2017-12618
Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...
CVE-2017-12618
CVE-2017-12618 affects APR-util (SDBM-backed databases used by apr_sdbm*()). The issue is a lack of integrity validation for SDBM files, enabling local attackers with write access to crash a program or cause denial of service. A patch/update for APR-util is available (see ALAS-2017-929 and Fedora...
CVE-2017-12618
Apache Portable Runtime Utility APR-util 1.6.0 and prior fail to validate the integrity of SDBM database files used by aprsdbm functions, resulting in a possible out of bound read access. A local user with write access to the database can make a program or process using these functions crash, and...
PJSIP Teluu pjproject pjlib and pjlib-util Integer Overflow Vulnerability
PJSIP is an open source, free multimedia communication library written in C. Teluu pjproject pjlib is one of the small framework libraries; pjlib-util is one of the auxiliary tool libraries . An integer overflow vulnerability exists in Teluu pjproject pjlib and pjlib-util in versions of PJSIP pri...
Open vSwitch Denial of Service Vulnerability (CNVD-2017-32356)
Open vSwitch OvS is a multi-layer virtual switch product based on open source technology following the Apache 2.0 license that supports large-scale network automation through programmatic extensions, standard management interfaces and protocols, and more. A security vulnerability exists in the...
PJSIP Teluu pjproject pjlib and pjlib-util Buffer Overflow Vulnerability
PJSIP is an open source, free multimedia communication library written in C. Teluu pjproject pjlib is one of the small framework libraries; pjlib-util is one of the auxiliary tool libraries . An integer overflow vulnerability exists in Teluu pjproject pjlib and pjlib-util in versions of PJSIP pri...
Oracle Java SE Multiple Vulnerabilities (October 2017 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...
Oracle Java SE Multiple Vulnerabilities (October 2017 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...
Oracle Java SE Security Update (cpuoct2017 - 03) - Linux
Oracle Java SE is prone to an unspecified vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Oracle Java SE Security Update (cpuoct2017 - 03) - Windows
Oracle Java SE is prone to an unspecified vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
LAME Heap Buffer Overflow Vulnerability
LAME is LAME team developed a set of open source MP3 audio compression software . A buffer overflow vulnerability exists in the 'fillbuffer' function of the libmp3lame/util.c file in LAME version 3.99.5. An attacker can exploit this vulnerability to cause a denial of service heap buffer...
DEBIAN-CVE-2017-14970
In lib/ofp-util.c in Open vSwitch OvS before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow group mod messages. NOTE: the vendor disputes the relevance of this report, stating "it can only be triggered by an OpenFlow controller, but OpenFlow controllers have much more...
Alienvault OSSIM av-centerd Util.pm sync_rserver Command Execution
require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm syncrserver Command Execution', 'Description' = %q This module exploits a command injection vulnerability found within the syncrserver function in Util.pm. The vulnerability is triggered due to an incomplete blacklist...