SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2014:0189-1)

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to 3.0.101 and also includes various other bug and security fixes. A new feature was added : - supported.conf: marked net/netfilter/xtset as supported bnc851066fate313309 The following security bugs have been fixed : CVE-2013-4587:...

DLA-25-3 python2.6 - regression update

Bulletin has no description...

[musl] Security advisory for musl libc - remote stack-based buffer overflow in DNS response parsing [CVE-2014-3484]

A remote stack-based buffer overflow has been found in musl libc's dns response parsing code. The overflow can be triggered in programs linked against musl libc and making dns queries via one of the standard interfaces getaddrinfo, getnameinfo, gethostbyname, gethostbyaddr, etc. if one of the...

Oracle Linux 6 : gnutls (ELSA-2014-0595)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0595 advisory. 2.8.5-14 - fix session ID length check 1102024 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 6 : mutt (ELSA-2014-0304)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0304 advisory. 5:1.5.20-4.20091214hg736b6a - Resolves: 1075872 CVE-2014-0467, heap-based buffer overflow when parsing certain headers Tenable has extracted the preceding...

Debian Security Advisory DSA 2852-1 (libgadu - heap-based buffer overflow)

Yves Younan and Ryan Pentney discovered that libgadu, a library for accessing the Gadu-Gadu instant messaging service, contained an integer overflow leading to a buffer overflow. Attackers which impersonate the server could crash clients and potentially execute arbitrary code. OpenVAS Vulnerabili...

Oracle Linux 5 : cscope (ELSA-2009-1102)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1102 advisory. 15.5-15.1.el53.1 - Release bump to create newer nvr despite dist tag change fc6 - el5 15.5-15.el53.4 - Merge incdir-overflow and snprintf patches for...

MGASA-2013-0172 Updated php packages fix security vulnerabilies

Heap based buffer overflow in quotedprintableencode in PHP before version 5.4.16 CVE-2013-2110. Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service applicati...

mesa security update

6.5.1-7.11 - CVE-2013-1993 - buffer overflows in DRI protocol 963066...

Debian Security Advisory DSA 2623-1 (openconnect - buffer overflow)

Kevin Cernekee discovered that a malicious VPN gateway can send crafted responses which trigger stack-based buffer overflows. OpenVAS Vulnerability Test $Id: deb2623.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2623-1 using nvtgen 1.0 Script version: 1.0 Author:...

RedHat Update for libproxy RHSA-2012:1461-01

Check for the Version of libproxy OpenVAS Vulnerability Test RedHat Update for libproxy RHSA-2012:1461-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Slackware Advisory SSA:2008-062-01 espgs/ghostscript

The remote host is missing an update as announced via advisory SSA:2008-062-01. OpenVAS Vulnerability Test $Id: esoftslkssa200806201.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2006-230-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow

Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/49444/info Cerberus FTP Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

rsyslog security update

4.6.2-3.el61.2 - add patch to resolve buffer overflow CVE-2011-3200 Resolves: 733647...

openSUSE Security Update : libsmi (openSUSE-SU-2011:0011-1)

This update fixes a buffer overflow the smiGetNode function in libsmi. It allowed context-dependent attackers to execute arbitrary code via an Object Identifier. CVE-2010-2891: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C Tenable Network...

Fedora 13 : wireshark-1.2.14-1.fc13 (2011-0460)

Mon Jan 17 2011 Jan Safranek - 1.2.14-1 - upgrade to 1.2.14 - see http://www.wireshark.org/docs/relnotes/wireshark-1.2.1 4.html - Wed Jan 5 2011 Jan Safranek - 1.2.13-2 - fixed buffer overflow in ENTTEC dissector 666897 - Mon Nov 22 2010 Jan Safranek - 1.2.13-1 - upgrade to 1.2.13 - see...

SuSE 10 Security Update : cpio (ZYPP Patch Number 6948)

This update fixes a heap-based buffer overflow flaw that can happen while expanding specially crafted archive files. CVE-2010-0624 It also contains changes for : fixed Dat160 Tape Drive density information bnc415166 fixed cpio issues with file sizes = 2^32 fixed handling eof and eod marks...

cpio security update

2.6-23.1 - CVE-2010-0624 fix heap-based buffer overflow by expanding a specially-crafted archive - CVE-2007-4476 fix stack crashing in safernamesuffix...

SuSE 11 Security Update : gmime (SAT Patch Number 1998)

This update of gmime fixes a buffer overflow in the GMIMEUUENCODELEN macro which allowed possible code execution while processing uuencoded data. CVE-2010-0409: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...