SUSE SLES11 Security Update : bsdtar (SUSE-SU-2016:1939-1)

bsdtar was updated to fix seven security issues. These security issues were fixed : - CVE-2015-8929: Memory leak in tar parser bsc985669. - CVE-2016-4809: Memory allocate error with symbolic links in cpio archives bsc984990. - CVE-2015-8920: Stack out of bounds read in ar parser bsc985675. -...

Adobe Reader DC FlateDecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Oracle Linux 6 : php (ELSA-2015-1218)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1218 advisory. - fix patch for CVE-2015-4024 - core: fix multipart/form-data request can use excessive amount of CPU usage CVE-2015-4024 - fix various functions accep...

SuSE 11.3 Security Update : gd (SAT Patch Number 10530)

The graphics drawing library gd has been updated to fix one security issue : - possible buffer read overflow CVE-2014-9709 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

openSUSE Security Update : gd (openSUSE-2015-280)

The graphics drawing library gd was updated to fix one security issue. The following vulnerability was fixed : - possible buffer read overflow CVE-2014-9709 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

SUSE-SU-2015:0835-1 Security update for gd

The graphics drawing library gd has been updated to fix one security issue: possible buffer read overflow CVE-2014-9709 Security Issues: CVE-2014-9709...

SUSE-SU-2015:0866-1 Security update for gd

The graphics drawing library gd was updated to fix one security issue. The following vulnerability was fixed: possible buffer read overflow CVE-2014-9709...

SuSE 11.3 Security Update : libsndfile (SAT Patch Number 10221)

This update for libsndfile fixes two buffer read overflows in sd2parsersrcfork. CVE-2014-9496, bsc911796 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novel...

How to prevent the next heartbleed-vulnerability warning-the black bar safety net

I. Introduction Based on the OpenSSL heart bleed vulnerability was considered to be the CVE-2 0 1 4-0 1 6 0 serious problem, OpenSSL is widely used in SSL and TLS plug-in. As used herein, the heart bleed vulnerability explanation this vulnerability is what is the use. This article studies the...

Amazon Linux AMI : postgresql8 (ALAS-2013-244)

An array index error, leading to a heap-based out-of-bounds buffer read flaw, was found in the way PostgreSQL performed certain error processing using enumeration types. An unprivileged database user could issue a specially crafted SQL query that, when processed by the server component of the...

CentOS Update for postgresql84 CESA-2013:1475 centos5

Check for the Version of postgresql84 OpenVAS Vulnerability Test CentOS Update for postgresql84 CESA-2013:1475 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

CentOS 5 / 6 : postgresql / postgresql84 (CESA-2013:1475)

Updated postgresql and postgresql84 packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

postgresql, postgresql84 security update

CentOS Errata and Security Advisory CESA-2013:1475 Updated postgresql and postgresql84 packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability...

Moderate: Red Hat Security Advisory: postgresql and postgresql84 security update

Updated postgresql and postgresql84 packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Oracle Linux 5 : krb5 (ELSA-2009-0408)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0408 advisory. - update to revised patch for CVE-2009-0844/CVE-2009-0845 - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism 490635,...

CVE-2013-2968

An unspecified buffer-read method in IBM Sterling Control Center SCC 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a denial of service via a large file that lacks end-of-line characters...

Design/Logic Flaw

An unspecified buffer-read method in IBM Sterling Control Center SCC 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a denial of service via a large file that lacks end-of-line characters...

CVE-2013-2968

IBM Sterling Control Center (SCC) is affected by CVE-2013-2968 due to a buffer-read flaw in a component used when reading large files without end-of-line characters. Affected SCC versions are 5.2 (up to 5.2.0.8), 5.3 (up to 5.3.0.3), and 5.4 (up to 5.4.0.1). The issue can allow remote authenticat...

CVE-2013-2968

An unspecified buffer-read method in IBM Sterling Control Center SCC 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a denial of service via a large file that lacks end-of-line characters...

CVE-2013-2968: Improper Restriction of Operations within the Bounds of a Memory Buffer

An unspecified buffer-read method in IBM Sterling Control Center SCC 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to cause a denial of service via a large file that lacks end-of-line characters...