UBUNTU-CVE-2016-9067

Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox 50...

Oracle Linux 7 : ntp (ELSA-2016-2583)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2583 advisory. - add disable monitor to default ntp.conf CVE-2013-5211 - don't allow spoofed packet to enable symmetric interleaved mode CVE-2016-1548 - check mode of...

MariaDB Server 10.0.x < 10.0.28 Multiple Vulnerabilities

Binary data 9752.prm...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

CVE-2016-7989

CVE-2016-7989 affects Samsung Galaxy S4–S7. A malformed OTA WAP PUSH SMS containing an OMACP message triggers an unhandled ArrayIndexOutOfBoundsException in Samsung’s WifiServiceImpl (wifi-service.jar), causing the Android runtime to crash repeatedly and render the device unusable until a factory...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

Debian DLA-685-2 : libxi regression update

A regression was found in the previous libxi update. An uninitialized pointer could be freed, causing crashes. For Debian 7 'Wheezy', these problems have been fixed in version 2:1.6.1-1+deb7u3. We recommend that you upgrade your libxi packages. NOTE: Tenable Network Security has extracted the...

Amazon Linux: Security Advisory (ALAS-2016-733)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Server Component Remote Denial of Service Vulnerability (CNVD-2016-09885)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A remote denial of service vulnerability exists in the Server: GIS subcomponent of the MySQL Server component o...

Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=868 We have encountered Windows kernel crashes in the win32k!sbitEmbolden and win32k!ttfdCloseFontContext functions while processing corrupted TTF font files. Excerpts of them are shown below: --- KERNELMODEEXCEPTIONNOTHANDLED 8e...

Microsoft Windows - win32k.sys TTF Processing win32k!sbit_Embolden win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

Microsoft Windows - win32k.sys TTF Processing win32k!sbitEmbolden win32k!ttfdCloseFontContext Use-After-Free MS16-120 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=868 We have encountered Windows kernel crashes in the win32k!sbitEmbolden and win32k!ttfdCloseFontContext functio...

Brave Software: Javascript confirm() crashes Brave on PC

Hello Brave, https://hackerone.com/smelt and I found a glitch for Brave on Windows. Summary: If you run the javascript code confirm, Brave will crash. This is major for a glitch, because people may be visiting websites that have confirm messages and Brave will suddenly and unexpectedly crash for...

ClamAV < 0.99.2 Crafted '7z' And 'Mew Packer' Parsing DoS Vulnerabilities - Linux

ClamAV is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"...

SA132 : OpenSSL Vulnerabilities 22-Sep-2016 and 26-Sep-2016

SUMMARY Blue Coat products using affected versions of OpenSSL are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to recover private DSA keys or execute arbitrary code through integer overflow and buffer overwrites. The attacker can also cause denial o...

SUSE-SU-2016:2453-1 Security update for wireshark

wireshark was updated to version 1.12.13 to fix the following issues: - CVE-2016-6504: wireshark: NDS dissector crash bnc991012 - CVE-2016-6505: wireshark: PacketBB dissector could divide by zero bnc991013 - CVE-2016-6506: wireshark: WSP infinite loop bnc991015 - CVE-2016-6507: wireshark: MMSE...

DEBIAN-CVE-2016-6172

PowerDNS aka pdns Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service memory exhaustion and secondary DNS server crash via a large 1 AXFR or 2 IXFR response...

Vulnerability in OpenSSL - Excessive allocation of memory in tls_get_message_header()

A TLS message includes 3 bytes for its length in the header for the message. This would allow for messages up to 16Mb in length. Messages of this length are excessive and OpenSSL includes a check to ensure that a peer is sending reasonably sized messages in order to avoid too much memory being...

CentOS 6 : libarchive (CESA-2016:1850)

An update for libarchive is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20160915)

Security Fixes : - A security flaw was found in the Linux kernel in the marksourcechains function in 'net/ipv4/netfilter/iptables.c'. It is possible for a user-supplied 'iptentry' structure to have a large 'nextoffset' field. This field is not bounds checked prior to writing to a counter value at...

SUSE SLES11 Security Update : glibc (SUSE-SU-2016:2156-1)

This update for glibc fixes the following issues : - Drop old fix that could break services that start before IPv6 is up. bsc931399 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Relocate DSOs in dependency order, fixin...