openSUSE Security Update : jasper (openSUSE-2017-844)

This update for jasper fixes the following issues : Security issues fixed : - CVE-2016-9262: Multiple integer overflows in the jasrealloc function in base/jasmalloc.c and memresize function in base/jasstream.c allow remote attackers to cause a denial of service via a crafted image, which triggers...

PT-2017-3734 · Qemu +1 · Qemu +2

Name of the Vulnerable Software and Affected Versions: Qemu versions prior to 2.10.1 Qemu-NBD affected versions not specified Description: The issue is related to errors during connection establishment in the Qemu-NBD hardware emulator server. It can be exploited by a remote attacker to cause a...

EulerOS 2.0 SP1 : kernel (EulerOS-SA-2017-1122)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The regulatorenagpiofree function in drivers/regulator/core.c in the Linux kernel allows local users to gain privileges or cause a denial of...

graphite2: assertion error "size() > n"

An assertion error has been reported in graphite2. An attacker could possibly exploit this flaw to cause an application crash...

krb5 -- Multiple vulnerabilities

MIT reports: CVE-2017-11368: In MIT krb5 1.7 and later, an authenticated attacker can cause an assertion failure in krb5kdc by sending an invalid S4U2Self or S4U2Proxy request. CVE-2017-11462: RFC 2744 permits a GSS-API implementation to delete an existing security context on a second or subseque...

LibTIFF - 'tif_dirwrite.c' Denial of Service

Source: http://bugzilla.maptools.org/showbug.cgi?id=2712 Triggered by "./tiffset POC1" $ ./tiffset POC1 TIFFReadDirectory: Warning, Unknown field with tag 302 0x12e encountered. TIFFReadDirectory: Warning, Unknown field with tag 61961 0xf209 encountered. poc3: AdobeDeflate compression support is...

The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the sctpwaitforsndbuf function in the net/sctp/socket.c kernel of the Linux operating system exists due to insufficient checking of resource status when the resource can be used concurrently. Exploiting this vulnerability allows a malicious actor to cause a service failure—wi...

bind: assertion failure while handling a query response containing inconsistent DNSSEC information

A denial of service flaw was found in the way BIND handled a query response containing inconsistent DNSSEC information. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver

A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

Important: Red Hat Security Advisory: bind security and bug fix update

An update for bind is now available for Red Hat Enterprise Linux 6.2 Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise Linux 6.6 Advanc...

bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver

A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: assertion failure while handling responses containing a DNAME answer

A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: assertion failure while handling an unusually-formed DS record response

A denial of service flaw was found in the way BIND handled an unusually-formed DS record response. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

bind: assertion failure while processing response to an ANY query

A denial of service flaw was found in the way BIND processed a response to an ANY query. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

Mozilla Firefox and Firefox ESR Graphite 2 Denial of Service Vulnerability (CNVD-2017-12542)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a suite of enterprise-class open source system monitoring tools data plotting written ...

CVE-2017-9501

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file...

Updated tor packages fix security vulnerability

A remotely triggerable assertion failure caused by receiving a BEGINDIR cell on a hidden service rendezvous circuit CVE-2017-0376...

MGASA-2017-0176 Updated tor packages fix security vulnerability

A remotely triggerable assertion failure caused by receiving a BEGINDIR cell on a hidden service rendezvous circuit CVE-2017-0376...

Tor Denial of Service Vulnerability (CNVD-2017-14149)

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. A denial of service vulnerability exists in the 'connectionedgeprocessrelaycell' function of the hidden service function in versions of Tor prior to 0.3.0.8. An attack...

Tor Denial of Service Vulnerability (CNVD-2017-14148)

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. A denial of service vulnerability exists in the 'relaysendendcellfromedge' function of the hidden services function in versions of Tor prior to 0.3.0.8. An attacker ca...