2601 matches found
DSA-922-1 kernel-source-2.6.8 - several
Bulletin has no description...
MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:220 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: 10.2 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this...
USN-151-4: rpm vulnerability
USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since lsb-rpm is statically linked against the zlib library, it is also affected by these issues. The updated...
[SA17409] Serv-U FTP Server Potential Denial of Service Vulnerability
TITLE: Serv-U FTP Server Potential Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17409 VERIFY ADVISORY: http://secunia.com/advisories/17409/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Serv-U FTP Server 6.x http://secunia.com/product/5878/ DESCRIPTION: A...
Mandrake Linux Security Advisory : perl-Compress-Zlib (MDKSA-2005:196)
The perl Compress::Zlib module contains an internal copy of the zlib library that was vulnerable to CVE-2005-1849 and CVE-2005-2096. This library was updated with version 1.35 of Compress::Zlib. An updated perl-Compress-Zlib package is now available to provide the fixed module. %NASLMINLEVEL 7030...
USN-151-3: zlib vulnerabilities
USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since aide is statically linked against the zlib library, it is also affected by these issues. The updated packagages...
SUSE-SA:2005:050: kernel
The remote host is missing the patch for the advisory SUSE-SA:2005:050 kernel. The Linux kernel was updated to fix the following security issues: - CVE-2005-2457: A problem in decompression of files on 'zisofs' filesystem was fixed. - CVE-2005-2458: A potential buffer overflow in the zlib...
Mandrake Linux Security Advisory : zlib (MDKSA-2005:124)
A previous zlib update MDKSA-2005:112; CVE-2005-2096 fixed an overflow flaw in the zlib program. While that update did indeed fix the reported overflow issue, Markus Oberhumber discovered additional ways that a specially crafted compressed stream could trigger an overflow. An attacker could creat...
GLSA-200509-18 : Qt: Buffer overflow in the included zlib library
The remote host is affected by the vulnerability described in GLSA-200509-18 Qt: Buffer overflow in the included zlib library Qt links to a bundled vulnerable version of zlib when emerged with the zlib USE-flag disabled. This may lead to a buffer overflow. Impact : By creating a specially crafted...
Slackware 10.0 / 10.1 / current : zlib (SSA:2005-203-03)
New zlib packages are available for Slackware 10.0, 10.1, and -current to fix an additional crash issue. zlib 1.1.x is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...
Mandrake Linux Security Advisory : wxPythonGTK (MDKSA-2005:144)
Wouter Hanegraaff discovered that the TIFF library did not sufficiently validate the 'YCbCr subsampling' value in TIFF image headers. Decoding a malicious image with a zero value resulted in an arithmetic exception, which can cause a program that uses the TIFF library to crash. wxPythonGTK uses a...
[SECURITY] [DSA 797-2] Updated zsync i386 packages fix build error
-------------------------------------------------------------------------- Debian Security Advisory DSA 797-2 [email protected] http://www.debian.org/security/ Michael Stone September 28th, 2005 http://www.debian.org/security/faq -...
Qt: Buffer overflow in the included zlib library
Background Qt is a cross-platform GUI toolkit used by KDE. Description Qt links to a bundled vulnerable version of zlib when emerged with the zlib USE-flag disabled. This may lead to a buffer overflow. Impact By creating a specially crafted compressed data stream, attackers can overwrite data...
zsync Multiple zlib Vulnerabilities
zsync Multiple zlib Vulnerabilities Secunia Advisory: SA16672 Release Date: 2005-09-02 Critical: Moderately critical Impact: DoS System access Where: From remote Solution Status: Unpatched Software: zsync 0.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories...
[SECURITY] [DSA 797-1] New zsync packages fix DOS
-------------------------------------------------------------------------- Debian Security Advisory DSA 797-1 [email protected] http://www.debian.org/security/ Michael Stone September 1st, 2005 http://www.debian.org/security/faq -...
DSA-797-1 zsync - buffer overflow
Bulletin has no description...
DSA-797-2 zsync - buffer overflow
zsync, a file transfer program, includes a modified local copy of the zlib library, and is vulnerable to certain bugs fixed previously in the zlib package. There was a build error for the sarge i386 proftpd packages released in DSA 797-1. A new build, zsync\0.3.3-1.sarge.1.2, has been prepared to...
CVE-2005-2458
inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service kernel crash via a compressed file with "improper tables"...
CVE-2005-2459
The huftbuild function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service kernel crash via a certain compressed file that leads to a null pointer dereference, a different vulnerability than...
