[ASA-201702-5] gst-plugins-bad: multiple issues

Arch Linux Security Advisory ASA-201702-5 ========================================= Severity: Critical Date : 2017-02-03 CVE-ID : CVE-2017-5843 CVE-2017-5848 Package : gst-plugins-bad Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-165 Summary ======= The package...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2017:0331-1)

gstreamer-010-plugins-bad was udpated to fix one issue. This security issue was fixed : - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2017:0330-1)

This update for gstreamer-010-plugins-bad fixes the following issue : - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automaticall...

SUSE-SU-2017:0330-1 Security update for gstreamer-0_10-plugins-bad

This update for gstreamer-010-plugins-bad fixes the following issue: - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659...

openSUSE Security Update : gstreamer-0_10-plugins-bad (openSUSE-2017-152)

This update for gstreamer-010-plugins-bad fixes the following issue : - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Internet Bug Bounty: CVE-2017-3730: Bad (EC)DHE parameters cause a client crash

https://www.openssl.org/news/secadv/20170126.txt https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-affects-servers-as-well-poc/...

Vulnerability in OpenSSL - Bad (EC)DHE parameters cause a client crash

If a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack. Found by Guido Vranken...

Director Error "Cannot retrieve data. Data source unresponsive or reported an error".

The following error is seen in the event viewer of the Director server: Log Name: Application Source: Citrix Director Service Date: 1/20/2017 11:05:33 AM Event ID: 5 Task Category: None Level: Error Keywords: Classic User: N/A Computer: CtxDirector.RepLab.Local Description: The description for...

bad-zwischenahn.de XSS vulnerability

Vulnerable URL: https://www.bad-zwischenahn.de/de/buergerservice/unternehmensverzeichnis/branchensuche.php?suche=test%22%3E%3Cimg+src%3Dx+onerror%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerabili...

openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2017-84)

This update for gstreamer-plugins-bad fixes the following issues : - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659. - CVE-2016-9812: Out of bounds read in gstmpegtssectionnew bsc1013678. - CVE-2016-9813: mpegts parser: NULL pointer deref in parsepat bsc1013680. %NASLMINLEVEL...

openSUSE Security Update : gstreamer-0_10-plugins-bad (openSUSE-2017-85)

This update for gstreamer-010-plugins-bad fixes the following issue : - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2017-94)

This update for gstreamer-plugins-bad fixes the following issues : - CVE-2016-9809: Off by one read in gsth264parsesetcaps bsc1013659. - CVE-2016-9812: Out of bounds read in gstmpegtssectionnew bsc1013678. - CVE-2016-9813: mpegts parser: NULL pointer deref in parsepat bsc1013680. %NASLMINLEVEL...

Buffer overflow

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR988462...

DiskBoss Enterprise 7.5.12 - POST Remote Buffer Overflow (SEH)

DiskBoss Enterprise 7.5.12 - POST Remote Buffer Overflow SEH !/usr/bin/python Exploit Title: DiskBoss Enterprise 7.5.12 SEH + Egghunter Buffer Overflow Date: 10-01-2017 Exploit Author: Wyndell Bibera Software Link: http://www.diskboss.com/setups/diskbossentsetupv7.5.12.exe Version: 7.5.12 Tested...

CentOS Update for gstreamer-plugins-bad-free CESA-2017:0018 centos7

Check the version of gstreamer-plugins-bad-free SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : gstreamer-0_10-plugins-bad (openSUSE-2017-64)

This update for gstreamer-010-plugins-bad fixes the following issues : - CVE-2016-9445, CVE-2016-9446: Protection against buffer overflows bsc1010829 - CVE-2016-9447: Disable the nsf plugin bsc1010514 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C...

openSUSE Security Update : gstreamer-plugins-bad (openSUSE-2017-63)

This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes : - Check an integer overflow CVE-2016-9445 and initialize a buffer CVE-2016-9446 in vmncdec. bsc1010829 - CVE-2016-980...

RedHat Update for gstreamer1-plugins-bad-free RHSA-2017:0021-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2017:0027-1)

This update for gstreamer-010-plugins-bad fixes the following issues : - CVE-2016-9445, CVE-2016-9446: Protection against buffer overflows bsc1010829 - CVE-2016-9447: Disable the nsf plugin bsc1010514 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2017:0028-1)

This update for gstreamer-010-plugins-bad fixes the following issues : - CVE-2016-9445, CVE-2016-9446: Protection against buffer overflows bsc1010829 - CVE-2016-9447: Disable the nsf plugin bsc1010514 Note that Tenable Network Security has extracted the preceding description block directly from t...