SuSE 11.2 / 11.3 Security Update : libtiff (SAT Patch Numbers 8384 / 8385)

This tiff update fixes several security issues. - tiff: buffer overflows/use after free problem. bnc834477: CVE-2013-4232 / CVE-2013-4231 - libtiff gif2tiff: heap-based buffer overflow in readgifimage. bnc834779: CVE-2013-4243 - libtiff gif2tiff: OOB Write in LZW decompressor. bnc834788:...

Improperly initialized memory and overflows in some JavaScript functions — Mozilla

Compiler Engineer Dan Gohman of Google discovered a flaw in the JavaScript engine where memory was being incorrectly allocated for some functions and the calls for allocations were not always properly checked for overflow, leading to potential buffer overflows. When combined with other...

CVE-2010-1159

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service crash and execute arbitrary code via a 1 large length value in an EAPOL packet or 2 long EAPOL packet...

CVE-2010-1159

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service crash and execute arbitrary code via a 1 large length value in an EAPOL packet or 2 long EAPOL packet...

CVE-2010-1159

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service crash and execute arbitrary code via a 1 large length value in an EAPOL packet or 2 long EAPOL packet...

CVE-2010-1159

Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service crash and execute arbitrary code via a 1 large length value in an EAPOL packet or 2 long EAPOL packet...

PolarSSL multiple security vulnerabilities

DoS, buffer overflows, timing attacks...

GLSA-201310-16 : TPTEST: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201310-16 TPTEST: Arbitrary code execution The GetStatsFromLine function in TPTEST is vulnerable to buffer overflows from STATS lines with long email and pwd fields. Impact : A remote attacker could send a specially crafted STATS...

Fedora 18 : libtar-1.2.11-25.fc18 (2013-18785)

fix CVE-2013-4397: buffer overflows by expanding a specially crafted archive Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] [DSA 2771-1] nas security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2771-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 09, 2013 http://www.debian.org/security/faq -...

Scientific Linux Security Update : glibc on SL5.x i386/x86_64 (20131008)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions pvalloc, valloc, and memalign. If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

Oracle Linux 5 : glibc (ELSA-2013-1411)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1411 advisory. 2.5-118.2 - Fix integer overflows in valloc and memalign. 1011804. 2.5-118.1 - Add support for newer L3 caches on x86-64 and correctly count the number of...

Debian DSA-2771-1 : nas - several vulnerabilities

Hamid Zamani discovered multiple security problems buffer overflows, format string vulnerabilities and missing input sanitising, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 2771-1] nas security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2771-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 09, 2013 http://www.debian.org/security/faq -...

CVE-2013-4256

Multiple stack-based and heap-based buffer overflows in Network Audio System NAS 1.9.3 allow local users to cause a denial of service crash or possibly execute arbitrary code via the 1 display command argument to the ProcessCommandLine function in server/os/utils.c; 2 ResetHosts function in...

CVE-2013-4256

CVE-2013-4256 describes multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 that could allow a local attacker to crash the process or potentially execute arbitrary code via several NAS server modules (e.g., ProcessCommandLine, ResetHosts, various open/unix soc...

Debian Security Advisory DSA 2771-1 (nas - several vulnerabilities)

Hamid Zamani discovered multiple security problems buffer overflows, format string vulnerabilities and missing input sanitising, which could lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2771.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA...

DSA-2771-1 nas - several

Bulletin has no description...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2013:1411 Updated glibc packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CV...

Debian: Security Advisory (DSA-2771-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...