openldap security and bug fix update

2.4.23-26 - fix: MozNSS CA cert dir does not work together with PEM CA cert file 818844 - fix: memory leak: defurlpre is not freed 816168 - fix update: Default SSL certificate bundle is not found by openldap library 742023 2.4.23-25 - fix update: Default SSL certificate bundle is not found by...

PT-2012-4280

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 20.0.1132.43 Description The issue is related to the texSubImage2D implementation in the WebGL subsystem, which does not properly handle uploads to floating-point textures. This can be exploited by remote...

RHEL 6 : openldap (RHSA-2012:0899)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0899 advisory. OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. A denial of service flaw was found...

PT-2012-3808

Name of the Vulnerable Software and Affected Versions MySQL versions 5.1.x through 5.1.61 MySQL versions 5.5.x through 5.5.21 Description The issue allows remote authenticated users to cause a denial of service, resulting in an assertion failure and mysqld abort. This can be achieved by deleting ...

PT-2012-1160

Name of the Vulnerable Software and Affected Versions OpenLDAP versions prior to 2.4.30 Description The issue allows remote attackers to cause a denial of service, leading to an assertion failure and daemon exit, via an LDAP search query with attrsOnly set to true. This results in empty attribute...

CVE-2012-1820

The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...

CVE-2012-1820

Summary of CVE-2012-1820 : In Quagga, the bgpd daemon (versions up to 0.99.20.1 and earlier) incorrectly processes the BGP ORF capability in OPEN messages, allowing a remote attacker with a configured BGP peer to trigger an assertion failure and crash bgpd, causing a denial of service. The root c...

CVE-2012-1820

The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message...

CVE-2012-1327

dot11t/tifdot11halath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service assertion failure and reboot via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391...

Code injection

dot11t/tifdot11halath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service assertion failure and reboot via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391...

CVE-2012-1327: Improper Access Control

dot11t/tifdot11halath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service assertion failure and reboot via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391...

PT-2012-3190

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 15.1 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and reboot, via 802.11 wireless traffic. This can be demonstrated by a video call from Apple iOS...

CVE-2012-0249

Buffer overflow in the ospflsupdlistlsa function in ospfpacket.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a Link State Update aka LS Update packet that is smaller than the length...

Buffer overflow

Buffer overflow in the ospflsupdlistlsa function in ospfpacket.c in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a Link State Update aka LS Update packet that is smaller than the length...

CVE-2012-0249

Removed by vendor...

Fedora Update for opensaml FEDORA-2011-12815

Check for the Version of opensaml OpenVAS Vulnerability Test Fedora Update for opensaml FEDORA-2011-12815 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

GLSA-201203-12 : OpenSSL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201203-12 OpenSSL: Multiple vulnerabilities Multiple vulnerabilities have been found in OpenSSL: Timing differences for decryption are exposed by CBC mode encryption in OpenSSLs implementation of DTLS CVE-2011-4108. A policy check...

ImageMagick security and bug fix update

6.2.8.0-12.el5 - Add fix for CVE-2010-4167 767142 6.2.8.0-11.el5 Fix assertion failed when using 'identify -verbose' when theres no image information available 502626 6.2.8.0-10.el5 Fix memory allocation failure when using color option 616538 Fix hang when converting broken GIF 693989 Fix...

CVE-2012-0194: Undefined Security Weakness

The TCP implementation in IBM AIX 5.3, 6.1, and 7.1, when the Large Send Offload option is enabled, allows remote attackers to cause a denial of service assertion failure and panic via an unspecified series of packets...

ISC BIND Crafted ANY Request Response Multiple RRsets DoS

The version of BIND installed on the remote host suggests that it suffers from a denial of service vulnerability that could be triggered by sending a large volume of recursive queries that return multiple RRsets in the answer section, triggering assertion checks. To be vulnerable you need to have...