KLA11311 Multiple DoS vulnerabilities in Wireshark

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in the Bluetooth AVDTP dissector can be exploited remotely via malformed packet trac...

Security Advisory - Multiple Vulnerabilities in IPsec IKE of Huawei Firewall Products

There is a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbacher RSA padding oracle. Cause a Bleichenbacher oracle attack. Successful exploit this vulnerability c...

openSUSE Security Update : mariadb (openSUSE-2018-668)

This update for MariaDB to version 10.0.35 fixes multiple issues: Security issues fixed : - CVE-2018-2782: Unspecified DoS vulnerability in InnoDB bsc1090518 - CVE-2018-2784: Unspecified DoS vulnerability in InnoDB bsc1090518 - CVE-2018-2787: Unspecified vulnerability in InnoDB allowing writes...

Microsoft .NET Framework Security Feature Bypass And DoS Vulnerabilities (KB4095876)

This host is missing an important security update according to Microsoft KB4095876 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework Security Feature Bypass And DoS Vulnerabilities (KB4095875)

This host is missing an important security update according to Microsoft KB4095875 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

SUSE-SU-2018:0778-1 Security update for memcached

This update for memcached fixes the following issues: Security issues fixed: - CVE-2011-4971: remote DoS bsc817781. - CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode bsc798458. - CVE-2013-7239: SASL authentication allows wrong credentials to access memcache bsc857188. -...

SUSE SLES11 Security Update : squid3 (SUSE-SU-2018:0752-1)

This update for squid3 fixes the following issues: Security issues fixed : - CVE-2018-1000024: DoS fix caused by incorrect pointer handling when processing ESI responses. This affects the default custom esiparser bsc1077003. - CVE-2018-1000027: DoS fix caused by incorrect pointer handing whien...

openSUSE Security Update : squid (openSUSE-2018-238)

This update for squid fixes the following issues : Security issues fixed : - CVE-2018-1000024: DoS fix caused by incorrect pointer handling when processing ESI responses. This affects the default custom esiparser bsc1077003. - CVE-2018-1000027: DoS fix caused by incorrect pointer handing whien...

SUSE-SU-2018:0636-1 Security update for squid

This update for squid fixes the following issues: Security issues fixed: - CVE-2018-1000024: DoS fix caused by incorrect pointer handling when processing ESI responses. This affects the default custom esiparser bsc1077003. - CVE-2018-1000027: DoS fix caused by incorrect pointer handing whien...

Wireshark 2.4.x < 2.4.5 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.5 advisory. - In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed...

SUSE-SU-2018:0505-1 Security update for openvswitch

This update for openvswitch fixes the following issues: CVE-2017-9263: While parsing an OpenFlow role status message, there is a call to the abort functio for undefined role status reasons in the function ofpprintrolestatusmessage in lib/ofp-print.c that may be leveraged toward a remote DoS attac...

openSUSE: Security Advisory for xen (openSUSE-SU-2018:0459-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

The version of libxml2 packaged with Nokogiri contains a vulnerability. Nokogiri has mitigated these issue by upgrading to libxml 2.9.6. It was discovered that libxml2 incorrecty handled certain files. An attacker could use this issue with specially constructed XML data to cause libxml2 to consum...

Oracle Mysql Security Updates (jan2018-3236628) 02 - Windows

Oracle MySQL is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

libraw -- multiple DoS vulnerabilities

Secunia Research reports: CVE-2018-5800: An off-by-one error within the "LibRaw::kodakycbcrloadraw" function internal/dcrawcommon.cpp can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. CVE-2017-5801: An error within the "LibRaw::unpack" function src/librawcxx.c...

Malwarebytes 3.3.1.2183 Multiple DoS Vulnerabilities

These CVE SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113077";...

openSUSE Security Update : nodejs4 (openSUSE-2018-5)

This update for nodejs4 fixes the following issues : Security issues fixed : - CVE-2017-15896: Vulnerable to CVE-2017-3737 due to embedded OpenSSL bsc1072322. - CVE-2017-14919: Embedded zlib issue could cause a DoS via specific windowBits value. - CVE-2017-3738: Embedded OpenSSL is vulnerable to...

MariaDB 10.3.x < 10.3.1 Multiple DoS Vulnerabilities

The version of MariaDB running on the remote host is prior to 10.3.1. It is, therefore, affected by multiple denial of service vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105078; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:21";...

Security Advisory - Two DOS Vulnerabilities of XML Parser in Some Huawei Products

XML parser have two DOS vulnerabilities in some Huawei products. An attacker may craft specific XML files to the affected products. Due to not check the specially XML file and to parse this file, successful exploit will result in DOS attacks. Vulnerability ID: HWPSIRT-2017-03037 and...