Lucene search
+L

805 matches found

Tenable Nessus
Tenable Nessus
added 2013/01/09 12:0 a.m.28 views

GLSA-201301-05 : bzip2: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201301-05 bzip2: User-assisted execution of arbitrary code An integer overflow vulnerability has been discovered in bzip2. Please review the CVE identifier referenced below for details. Impact : A remote attacker could entice a us...

5.1CVSS6.3AI score0.03297EPSS
SaveExploits0References2
Prion
Prion
added 2012/10/31 4:55 p.m.21 views

Code injection

The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service memory consumption via a large 1 bzip2 or 2 lzma compressed kernel image...

2.7CVSS6.5AI score0.00923EPSS
SaveExploits0References15Affected Software2
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.20 views

Slackware Advisory SSA:2008-098-02 bzip2

The remote host is missing an update as announced via advisory SSA:2008-098-02. OpenVAS Vulnerability Test $Id: esoftslkssa200809802.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

4.3CVSS0.8AI score0.04519EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2012/09/11 12:0 a.m.27 views

Slackware Advisory SSA:2010-263-01 bzip2

The remote host is missing an update as announced via advisory SSA:2010-263-01. OpenVAS Vulnerability Test $Id: esoftslkssa201026301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

5.1CVSS0.6AI score0.03297EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2012/09/10 12:0 a.m.17 views

Slackware: Security Advisory (SSA:2010-263-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.1CVSS6.6AI score0.03297EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/09/10 12:0 a.m.33 views

Slackware: Security Advisory (SSA:2008-098-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS9.6AI score0.04519EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.27 views

Scientific Linux Security Update : bzip2 on SL3.x, SL4.x, SL5.x i386/x86_64

A buffer over-read flaw was discovered in the bzip2 decompression routine. This issue could cause an application linked against the libbz2 library to crash when decompressing malformed archives. CVE-2008-1372 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientifi...

4.3CVSS8.3AI score0.04519EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.25 views

Scientific Linux Security Update : bzip2 on SL6.x i386/x86_64

An integer overflow flaw was discovered in the bzip2 decompression routine. This issue could, when decompressing malformed archives, cause bzip2, or an application linked against the libbz2 library, to crash or, potentially, execute arbitrary code. CVE-2010-0405 All running applications using the...

5.1CVSS6.1AI score0.03297EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.45 views

Scientific Linux Security Update : bzip2 on SL3.x, SL4.x, SL5.x i386/x86_64

An integer overflow flaw was discovered in the bzip2 decompression routine. This issue could, when decompressing malformed archives, cause bzip2, or an application linked against the libbz2 library, to crash or, potentially, execute arbitrary code. CVE-2010-0405 All running applications using the...

5.1CVSS6.1AI score0.03297EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2012/07/31 6:39 p.m.6 views

xen: pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel

The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service memory consumption via a large 1 bzip2 or 2 lzma compressed kernel image...

2.7CVSS7.3AI score0.00923EPSS
SaveExploits0References4
OSV
OSV
added 2012/06/29 7:55 p.m.4 views

DEBIAN-CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS8.7AI score0.12608EPSS
SaveExploits1References1
Prion
Prion
added 2012/06/29 7:55 p.m.24 views

Design/Logic Flaw

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS6.8AI score0.12608EPSS
SaveExploits1References18Affected Software1
UbuntuCve
UbuntuCve
added 2012/06/29 7:55 p.m.39 views

CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS6.8AI score0.12608EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2012/06/29 12:0 a.m.42 views

CVE-2012-2098

Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service CPU consumption via a file with many repeating inputs...

5CVSS7.1AI score0.12608EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2012/06/29 12:0 a.m.5 views

PT-2012-1206 · Apache · Apache Commons Compress

Name of the Vulnerable Software and Affected Versions: Apache Commons Compress versions prior to 1.4.1 Description: The issue concerns a problem with the sorting algorithms in the bzip2 compressing stream, specifically in the BZip2CompressorOutputStream function of Apache Commons Compress. This...

5CVSS6.8AI score0.12608EPSS
SaveExploits1References50
OpenVAS
OpenVAS
added 2012/06/04 12:0 a.m.31 views

Fedora Update for apache-commons-compress FEDORA-2012-8465

Check for the Version of apache-commons-compress OpenVAS Vulnerability Test Fedora Update for apache-commons-compress FEDORA-2012-8465 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

5CVSS6.6AI score0.12608EPSS
SaveExploits1References2
seebug.org
seebug.org
added 2012/05/25 12:0 a.m.70 views

Apache Commons Compress和Apache Ant拒绝服务漏洞

BUGTRAQ ID: 53676 CVE ID: CVE-2012-2098 Apache Commons Compress库定义了一个API,可处理ar、cpio、Unix dump、tar、zip、gzip、XZ、Pack200、bzip2文件。Apache Ant,是一个将软件编译、测试、部署等步骤联系在一起加以自动化的一个工具,大多用于Java环境中的软件开发。 Apache Commons Compress 1.4.1之前版本在使用bzip2压缩文件时存在安全漏洞,可通过发送到BZip2CompressorOutputStream类的特制文件利用此漏洞消耗系统资源,造成拒绝服...

5CVSS2.1AI score0.12608EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2012/03/16 12:0 a.m.49 views

VMSA-2012-0005 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

The remote ESXi is missing one or more security related Updates from VMSA-2012-0005. Summary VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues Relevant releases VMware vCenter Server 5.0 VMware vSphere Client 5.0 VMware...

7.5CVSS7.6AI score0.15226EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2012/03/16 12:0 a.m.48 views

VMware ESXi/ESX patches address several security issues (VMSA-2012-0005)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0005. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS5.5AI score0.15226EPSS
SaveExploits4References1
securityvulns
securityvulns
added 2011/12/19 12:0 a.m.37 views

bzip2 bzexe symbolic links vulnerability

Insecure temporary files creation...

4.6CVSS1.5AI score0.01045EPSS
SaveExploits3References1Affected Software1
Rows per page
Query Builder