109 matches found
CVE-2020-26800
The CVE-2020-26800 entry concerns Aleth Ethereum C++ client, affected in versions
CVE-2020-26800: Out-of-bounds Write
A stack overflow vulnerability in Aleth Ethereum C++ client version = 1.8.0 using a specially crafted a config.json file may result in a denial of service...
PT-2021-11274
Name of the Vulnerable Software and Affected Versions: Aleth Ethereum C++ client versions prior to 1.8.1 Description: A stack overflow issue may occur in the Aleth Ethereum C++ client when a specially crafted config.json file is used, potentially resulting in a denial of service. Recommendations:...
Updated alpine and c-client packages fix security vulnerability
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do CVE-2020-14929...
MGASA-2021-0014 Updated alpine and c-client packages fix security vulnerability
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do CVE-2020-14929...
RabbitMQ C client: Arbitrary code execution
Background A C-language AMQP client library for use with v2.0+ of the RabbitMQ broker. Description It was discovered that RabbitMQ C client incorrectly handled certain inputs. Impact A remote attacker, by sending a specially crafted request, could possibly execute arbitrary code with the privileg...
GLSA-202003-07 : RabbitMQ C client: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-202003-07 RabbitMQ C client: Arbitrary code execution It was discovered that RabbitMQ C client incorrectly handled certain inputs. Impact : A remote attacker, by sending a specially crafted request, could possibly execute arbitrar...
[SECURITY] Fedora 31 Update: hiredis-0.13.3-13.fc31
Hiredis is a minimalistic C client library for the Redis database...
[SECURITY] Fedora 30 Update: hiredis-0.13.3-13.fc30
Hiredis is a minimalistic C client library for the Redis database...
rabbitmq-c integer overflow vulnerability
RabbitMQ is an open source implementation of AMQP written on the server side in the Erlang language that supports a variety of clients for storing and forwarding messages in a distributed system. rabbitmq-c is the RabbitMQ C client. An integer overflow vulnerability exists in amqphandleinput in...
CVE-2018-20840
An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of...
CVE-2018-19518: Improper Neutralization of Argument Delimiters in a Command
University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in c-client/imap4r1.c and the tcpaopen function in osdep/unix/tcpunix.c without preventing argument injection, which might allow remote...
Security Bulletin:Open Source Apache Zookeeper Vulnerabilities in IBM eDiscovery Analyzer
Summary Apache ZooKeeper is vulnerable to a buffer overflow, caused by improper bounds checking by the C client shells "clist" and "climt". By sending an overly long command, a attacker could overflow a buffer and execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2016-5017...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere MQ Advanced Message Security for IBM i, IBM WebSphere MQ Client for HP-NSS
Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by IBM WebSphere MQ Advanced Message Security for the IBM i platform, IBM WebSphere MQ HP-NSS and IBM WebSphere MQ Paho MQTT clients. IBM WebSphere MQ Advanced Message Security for the IBM i...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere MQ (HP-NSS and OVMS platforms) and Eclipse Paho MQTT C Client libraries (Windows and Linux platforms) (CVE-2014-3570, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205)
Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. This includes “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. OpenSSL is used by IBM WebSphere MQ on HP-NSS and HP OpenVMS platforms. Vulnerability Details CVEID:...
Debian: Security Advisory (DLA-819-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-4467
The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate when using the SChannel-based security layer,...
CVE-2016-4467: Improper Certificate Validation
The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate when using the SChannel-based security layer,...
PT-2017-8498 · Apache +1 · Apache Qpid Proton +1
Name of the Vulnerable Software and Affected Versions: Apache Qpid Proton library versions prior to 0.13.1 Description: The issue concerns the C client and C-based client bindings in the Apache Qpid Proton library, which do not properly verify the server hostname against the domain name in the...
