3121 matches found
PT-2017-17840 · Red Hat +3 · Elfutils +3
Name of the Vulnerable Software and Affected Versions: elfutils version 0.168 Description: The issue is related to the elf compress.c file in elfutils, which does not validate the zlib compression factor. This allows remote attackers to cause a denial of service, specifically memory consumption, ...
SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2017:0951-1)
This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...
Github enterprise remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
Right now, almost everyone in the use of GitHub. If you have a lot of Green Paper or for your own code very paranoid, then you can run your own GitHub. Paid$ 2500 dollars, you can get a GitHub Enterprise version for 10 users for one year. In fact, Github enterprise is a virtual machine, but...
Debian Security Advisory DSA 3801-1 (ruby-zip - security update)
It was discovered that ruby-zip, a Ruby module for reading and writing zip files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. dot dot in an extracted filename. OpenVAS Vulnerability Te...
Security update for Chromium (important)
This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink -...
zlib: Multiple vulnerabilities
Background zlib is a widely used free and patent unencumbered data compression library. Description Multiple vulnerabilities have been discovered in zlib. Please review the CVE identifiers referenced below for details. Impact An attacker could cause a Denial of Service condition. Workaround There...
GLSA-201701-56 : zlib: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201701-56 zlib: Multiple vulnerabilities Multiple vulnerabilities have been discovered in zlib. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a Denial of Service condition...
openSUSE Security Update : zlib (openSUSE-2017-47)
This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 - Incompatible declarations f...
openSUSE Security Update : zlib (openSUSE-2017-46)
This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 - Incompatible declarations for external...
PT-2017-1237
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.4 Description The issue is related to a buffer overflow in the shared memory manager of the sshd daemon in OpenSSH, which can be exploited by a local attacker to gain privileges. This is achieved by leveraging acces...
SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0004-1)
This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for...
SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0003-1)
This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for external...
SUSE-SU-2017:0004-1 Security update for zlib
This update for zlib fixes the following issues: CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for extern...
SUSE-SU-2017:0003-1 Security update for zlib
This update for zlib fixes the following issues: CVE-2016-9843: Big-endian out-of-bounds pointer CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for external linkage...
zlib Denial of Service Vulnerability
zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...
zlib denial of service vulnerability (CNVD-2016-13298)
zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...
zlib denial of service vulnerability (CNVD-2016-13296)
zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...
zlib denial of service vulnerability (CNVD-2016-13297)
zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...