5261 matches found
Vulnerability in OpenSSL - Excessive allocation of memory in tls_get_message_header()
A TLS message includes 3 bytes for its length in the header for the message. This would allow for messages up to 16Mb in length. Messages of this length are excessive and OpenSSL includes a check to ensure that a peer is sending reasonably sized messages in order to avoid too much memory being...
Scientific Linux Security Update : kernel on SL7.x x86_64 (20160915)
Security Fixes : - A security flaw was found in the Linux kernel in the marksourcechains function in 'net/ipv4/netfilter/iptables.c'. It is possible for a user-supplied 'iptentry' structure to have a large 'nextoffset' field. This field is not bounds checked prior to writing to a counter value at...
CentOS 6 : libarchive (CESA-2016:1850)
An update for libarchive is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
SUSE SLES11 Security Update : glibc (SUSE-SU-2016:2156-1)
This update for glibc fixes the following issues : - Drop old fix that could break services that start before IPv6 is up. bsc931399 - Do not copy dname field of struct dirent. CVE-2016-1234, bsc969727 - Fix memory leak in nssdnsgethostbyname4r. bsc973010 - Relocate DSOs in dependency order, fixin...
PT-2016-7027
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.52 and earlier, 5.6.33 and earlier, 5.7.15 and earlier MariaDB versions prior to 5.5.51, 10.0.x prior to 10.0.27, and 10.1.x prior to 10.1.17 Percona Server versions prior to 5.5.51-38.1, 5.6.x prior to 5.6.32-78.0, a...
Two Memory Corruption Vulnerabilities Exist in Antenna Defense
Anthem Defense is Anthem's antivirus program. Antenna Defense 7 Antivirus has two different memory corruption vulnerabilities when dealing with specific PE files, which allow attackers to exploit the vulnerabilities to construct malformed PE files that cause Antenna Defense 7 to crash due to memo...
catdvi Denial of Service Vulnerability
Catdvi is a program that converts Turks Device Independent DVI files into readable text. Catdvi-0.14 and previous versions failed to handle the global variable tfmtbl correctly, resulting in uninitialized files being used without initialization when reading specially constructed files, causing nu...
[SECURITY] Fedora 23 Update: kf5-kcrash-5.24.0-1.fc23
KCrash provides support for intercepting and handling application crashes...
SUSE-SU-2016:1799-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE and mozilla-nss
MozillaFirefox, MozillaFirefox-branding-SLE and mozilla-nss were updated to fix nine security issues. MozillaFirefox was updated to version 45.2.0 ESR. mozilla-nss was updated to version 3.21.1. These security issues were fixed: - CVE-2016-2834: Memory safety bugs in NSS MFSA 2016-61 bsc983639. -...
Fedora 23 : webkitgtk4 (2016-c1f4334ded)
This update addresses the following vulnerabilities : - CVE-2016-1857, CVE-2016-1856 Additional fixes : - Improved the detection of supported MIME types supported by the media player. - Fix web process crash when playing adaptive streaming media. - Change the volume while thumb slider is dragged,...
Firefox browser vulnerabilities that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...
Firefox browser vulnerabilities that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
Multiple vulnerabilities exist in the browser engine of Mozilla Firefox and Firefox ESR. These vulnerabilities allow malicious actors operating remotely to cause service failures memory errors and unexpected application termination or execute arbitrary code...
Firefox browser vulnerabilities that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
Multiple vulnerabilities exist in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird. These vulnerabilities allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
Multiple vulnerabilities in the Mozilla Firefox browser’s engine allow malicious actors to induce service failures memory errors and unexpected application termination or execute arbitrary code...
The vulnerability of the Thunderbird email client allows attackers to execute arbitrary code, gain access to confidential information, or cause service failures.
The Thunderbird email client contains a vulnerability related to errors in the implementation of the libxul.so!gfxContext::Polygon function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger service...
openSUSE: Security Advisory for GraphicsMagick (openSUSE-SU-2016:1724-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-04101)
Adobe Flash Player is a multimedia player product. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by remote attackers to construct malicious SWF content that can be parsed by the user, which can crash the application or execute arbitrary code...