ruby -- multiple vulnerabilities

Ruby blog: CVE-2017-0898: Buffer underrun vulnerability in Kernel.sprintf If a malicious format string which contains a precious specifier is passed and a huge minus value is also passed to the specifier, buffer underrun may be caused. In such situation, the result may contains heap, or the Ruby...

DLA-671-1 libxvmc - security update

Bulletin has no description...

Fedora 23 : putty-0.66-1.fc23 (2015-3d17682c15)

This is new version of putty. ---- This is an update fixing integer overflow and buffer underrun in erase characters ECH handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 22 : putty-0.66-1.fc22 (2015-5ad4a1f151)

This is new version of putty. ---- This is an update fixing integer overflow and buffer underrun in erase characters ECH handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

DLA-38-1 wireshark - security update

Bulletin has no description...

MGASA-2014-0326 Updated wireshark package fix security vulnerabilities

The Catapult DCT2000 and IrDA dissectors could underrun a buffer CVE-2014-5161, CVE-2014-5162. The GSM Management dissector could crash CVE-2014-5163. The RLC dissector could crash CVE-2014-5164. The ASN.1 BER dissector could crash CVE-2014-5165. The wireshark package has been updated to version...

Updated wireshark package fix security vulnerabilities

The Catapult DCT2000 and IrDA dissectors could underrun a buffer CVE-2014-5161, CVE-2014-5162. The GSM Management dissector could crash CVE-2014-5163. The RLC dissector could crash CVE-2014-5164. The ASN.1 BER dissector could crash CVE-2014-5165. The wireshark package has been updated to version...

[ MDVSA-2014:159 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:159 http://www.mandriva.com/en/support/security/ Package : wireshark Date : August 8, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

Mandriva Linux Security Advisory : wireshark (MDVSA-2014:159)

Multiple vulnerabilities has been discovered and corrected in wireshark : - The Catapult DCT2000 and IrDA dissectors could underrun a buffer CVE-2014-5161, CVE-2014-5162. - The GTP and GSM Management dissectors could crash CVE-2014-5163. - The RLC dissector could crash CVE-2014-5164. - The ASN.1...

FileZilla Client < 3.7.3 Multiple Vulnerabilities

The version of FileZilla Client on the remote host is a version prior to 3.7.3. As such, it is affected by multiple vulnerabilities : - A buffer underrun vulnerability exists that occurs when verifying a DSA signature when using SFTP. CVE-2013-4206 - A remote buffer overflow vulnerability exists...

DSA-2736-1 putty - several

Bulletin has no description...

Updated putty and filezilla packages fixes security vulnerability

PuTTY versions 0.62 and earlier - as well as all software that integrates these versions of PuTTY - are vulnerable to an integer overflow leading to heap overflow during the SSH handshake before authentication, caused by improper bounds checking of the length parameter received from the SSH serve...

Microsoft Windows DNSAPI.dll LLMNR Buffer Underrun DoS

This module exploits a buffer underrun vulnerability in Microsoft's DNSAPI.dll as distributed with Windows Vista and later without KB2509553. By sending a specially crafted LLMNR query, containing a leading '.' character, an attacker can trigger stack exhaustion or potentially cause stack memory...

Microsoft DNS Resolution LLMNR Query Remote Code Execution (MS11-030; CVE-2011-0657)

Link-local Multicast Name Resolution LLMNR is a new protocol that provides an additional method to resolve the names of neighboring computers. It is especially useful for networks that do not have a DNS server. LLMNR uses a simple exchange of request and reply messages to resolve computer names t...

ghostscript security update

7.07-33.2:.8 - Added extra checking for CVE-2009-0792 bug 491853. 7.07-33.2:.7 - Applied patch to fix scfd buffer underrun bug 493442. - Applied patch to fix CVE-2009-0792 bug 491853...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that...

CVE-2003-0082

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap aka "buffer underrun"...

CVE-2003-0082

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap aka "buffer underrun"...

CVE-2003-0082

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap aka "buffer underrun"...

CVE-2003-0082

The CVE-2003-0082 issue affects the KDC in Kerberos 5 (krb5) 1.2.7 and earlier. A remote, authenticated attacker can trigger a protocol request that causes the KDC to corrupt its heap (buffer underrun), leading to a denial of service (KDC crash) within the same realm. The connected advisories con...