Apache APR -- DoS vulnerabilities

The Apache Portable Runtime Project reports: A flaw was discovered in the aprfnmatch function in the Apache Portable Runtime APR library 1.4.4 or any backported versions that contained the upstream fix for CVE-2011-0419. This could cause httpd workers to enter a hung state 100% CPU utilization...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Researchers Warn of Security Issues in WebGL Standard

Security researchers are warning users that there are a number of vulnerabilities and potential problems with WebGL, and emerging standard for 3D rendering on the Web, that could cause serious problems for users. The weaknesses in WebGL range from denial-of-service problems to cross-domain file...

openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2010:1049-1)

a race condition in the accept implementation of smtpd.py could lead to a denial of service CVE-2010-3493. - integer overflows and insufficient size checks could crash the audioop module CVE-2010-2089, CVE-2010-1634. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

OpenSSL DTLS ChangeCipherSpec Remote DoS

This module performs a Denial of Service Attack against Datagram TLS in OpenSSL version 0.9.8i and earlier. OpenSSL crashes under these versions when it receives a ChangeCipherspec Datagram before a ClientHello. This module requires Metasploit: https://metasploit.com/download Current source:...

fetchmail -- STARTTLS denial of service

Matthias Andree reports: Fetchmail version 5.9.9 introduced STLS support for POP3, version 6.0.0 added STARTTLS for IMAP. However, the actual STARTTLS-initiated in-band SSL/TLS negotiation was not guarded by a timeout. Depending on the operating system defaults as to TCP stream keepalive mode,...

SuSE Update for kernel SUSE-SA:2011:017

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark < 1.2.16 / 1.4.5 Multiple Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.16 or 1.4.x less than 1.4.5. Such versions are affected by the following vulnerabilities : - A data type mismatch error exists in the function 'dissectnfsclientaddr4' in the file 'packet-nfs.c' of the NFS dissector and could lead to...

Google Chrome < 11.0.696.57 Multiple Vulnerabilities

Binary data 800937.prm...

MS11-024: Description of the security update for Windows Fax Cover Page Editor MFC components: April 12, 2011

None None...

Mandriva Update for pidgin MDVSA-2011:050 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2011:050 pidgin Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

SuSE 11 Security Update : MozillaFirefox, MozillaFirefox-branding-upstream, etc (SAT Patch Number 2254)

Mozilla Firefox was updated to version 3.5.9 fixing lots of bugs and security issues. The following security issues were fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed...

MDVA-2011:010 : djvulibre

Various problems were discovered with the DJVULibre firefox browser-plugin: Browser plugin from dejavulibre is obsolete and was causing browser crashes when viewing DJVU content. This browser plugin is now disabled, mozilla-plugin-dejavu should now be used. Djvulibre crashed when converting DJVU...

Debian Security Advisory DSA 2178-1 (pango1.0)

The remote host is missing an update to pango1.0 announced via advisory DSA 2178-1. OpenVAS Vulnerability Test $Id: deb21781.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2178-1 pango1.0 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Google Chrome < 9.0.597.107 Multiple Vulnerabilities

Binary data 5807.pasl...

Ubuntu Update for linux vulnerabilities USN-1080-1

Ubuntu Update for Linux kernel vulnerabilities USN-1080-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10801.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux vulnerabilities USN-1080-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

[SECURITY] [DSA 2178-1] pango1.0 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2178-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

Debian DSA-2178-1 : pango1.0 - NULL pointer dereference

It was discovered that Pango did not check for memory allocation failures, causing a NULL pointer dereference with an adjustable offset. This can lead to application crashes and potentially arbitrary code execution. The oldstable distribution lenny is not affected by this problem. %NASLMINLEVEL...

DSA-2178-1 pango1.0 - NULL pointer dereference

Bulletin has no description...

Google Chrome < 9.0.597.107 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 9.0.597.107. Such versions are reportedly affected by multiple vulnerabilities : - An unspecified error exists in the URL bar operations which can allow spoofing attacks. Issue 54262 - An unspecified error exists in the...