Debian DLA-1334-1 : mosquitto security update

CVE-2017-7651 A crafted CONNECT packet from an unauthenticated client could result in extraordinary memory consumption. CVE-2017-7652 In case all sockets/file descriptors are exhausted, a SIGHUP signal to reload the configuration could result in default config values especially bad security...

The vulnerability of the FTP server Pure-FTPd in the Fedora operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FTP server Pure-FTPd for the Fedora operating system is related to packaging errors. As a result, after an update, the original configuration is ignored, and the service starts working with the default configuration. Exploiting this vulnerability allows a remote attacker ...

CVE-2015-3153

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents...

CVE-1999-1515

The CVE-1999-1515 entry describes a vulnerability in the TenFour TFS Gateway 4.0 where a non-default configuration enables a denial-of-service. The issue arises from messages with incorrect sender and recipient addresses, causing the gateway to repeatedly attempt to return the message every 10 se...