Debian: Security Advisory (DSA-2960-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2956-1] icinga security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

openSUSE Security Update : gypsy (openSUSE-SU-2012:0884-1)

The following changes have been made : - Add gypsy-CVE-2011-0523.patch: add config file to restrict the files that can be read. Fix CVE-2011-0523 and bnc666839. - Add gypsy-CVE-2011-0524.patch: use snprintf to avoid buffer overflows. Fix CVE-2011-0524 and bnc666839. - Add gnome-common BuildRequir...

openSUSE Security Update : gimp (openSUSE-SU-2011:0162-1)

Four buffer overflows have been fixed in gimp and its plugins. CVE-2010-4540-CVE-2010-4543 have been assigned to these issues. - CVE-2010-4540: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-4541: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Buffer...

openSUSE Security Update : csound (openSUSE-SU-2012:0550-1)

specially crafted files could cause buffer overflows in csound %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-246. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libtiff-devel (libtiff-devel-4144)

specially crafted tiff images could cause buffer overflows in libtiff CVE-2011-0191, CVE-2011-0192. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-devel-4144. The text description of...

openSUSE Security Update : libtiff-devel (libtiff-devel-4143)

specially crafted tiff images could cause buffer overflows in libtiff CVE-2011-0191, CVE-2011-0192. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-devel-4143. The text description of...

openSUSE Security Update : libupnp (openSUSE-SU-2013:0255-1)

Update to version 1.6.18 bnc801061 + Security fix for CERT issue VU922681 This patch addresses three possible buffer overflows in function uniqueservicename. The three issues have the folowing CVE numbers: CVE-2012-5958 Issue 2: Stack-based buffer overflow of Tempbuf CVE-2012-5959 Issue 4:...

openSUSE Security Update : libotr (openSUSE-SU-2012:1525-1)

This update of libotr fixed multiple buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-798. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : plib (openSUSE-SU-2012:1506-1)

This update of plib fixed two stack-based buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-789. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0982-1)

This update of icedtea-web fixed multiple hewap buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-513. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : csound (openSUSE-SU-2012:0370-1)

specially crafted hetro and pvoc files could cause buffer overflows in csound %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-162. The text description of this plugin is C SUSE...

openSUSE Security Update : mipv6d (openSUSE-SU-2010:0736-1)

the mipv6 daemon did not check the origin of netlink messages, therefore allowing local users to spoof messages CVE-2010-2522. remote attackers could cause buffer overflows in mipv6d CVE-2010-2523. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities

Buffer overflows, memory corruptions, clickjacking...

openSUSE Security Update : icinga (openSUSE-SU-2014:0097-1)

imported upstream version 1.10.2 - includes fix for possible denial of service in CGI executables: CVE-2013-7108 bnc856837 - core: Add an Icinga syntax plugin for Vim 4150 - LE/MF - core: Document dropped options logexternalcommandsuser and eventprofilingenabled 4957 - BA - core: type in spec...

openSUSE Security Update : Kernel (openSUSE-SU-2012:0799-1)

This kernel update of the openSUSE 12.1 kernel fixes lots of bugs and security issues. Following issues were fixed : - tcp: drop SYN+FIN messages bnc765102. - net: sock: validate datalen before allocating skb in sockallocsendpskb bnc765320, CVE-2012-2136. - fcaps: clear the same personality flags...

Debian DSA-2955-1 : iceweasel - security update

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

[SECURITY] [DSA 2956-1] icinga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

CVE-2014-1543

CVE-2014-1543 affects Mozilla Firefox before 30.0, where multiple heap-based buffer overflows occur in navigator.getGamepads (Gamepad API) when using non-contiguous axes on physical or virtual gamepad devices. This can enable remote code execution. The available description indicates the issue li...

CVE-2014-1543

Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a 1 physical or 2 virtual Gamepad device...