86 matches found
Fedora 28 : lldpad (2018-cec7093baa)
Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV CVE-2018-10932. - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. Note that Tenable Network...
Fedora 29 : lldpad (2018-06d56c8c9d)
Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV CVE-2018-10932. - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. Note that Tenable Network...
Fedora 27 : lldpad (2018-e9d1ec6dbc)
Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV CVE-2018-10932. - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. Note that Tenable Network...
CVE-2018-1000021
It was found that the Git client printed server-sent ANSI escape codes to the terminal without any sanitization, leading to execution of arbitrary escape sequences in the terminal emulator. Exploitation of this flaw by a MitM attacker could potentially result in code execution, arbitrary file...
[ASA-201801-12] irssi: denial of service
Arch Linux Security Advisory ASA-201801-12 ========================================== Severity: Medium Date : 2018-01-16 CVE-ID : CVE-2018-5205 CVE-2018-5206 CVE-2018-5207 CVE-2018-5208 Package : irssi Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-575 Summary...
Updated irssi packages fix security vulnerabilities
Joseph Bisch discovered that Irssi incorrectly handled incomplete escape codes. If a user were tricked into using malformed commands or opening malformed files, an attacker could use this issue to cause Irssi to crash, resulting in a denial of service CVE-2018-5205. Joseph Bisch discovered that...
Ubuntu 14.04 LTS / 16.04 LTS : Irssi vulnerabilities (USN-3527-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3527-1 advisory. Joseph Bisch discovered that Irssi incorrectly handled incomplete escape codes. If a user were tricked into using malformed commands or openi...
USN-3527-1: Irssi vulnerabilities
Joseph Bisch discovered that Irssi incorrectly handled incomplete escape codes. If a user were tricked into using malformed commands or opening malformed files, an attacker could use this issue to cause Irssi to crash, resulting in a denial of service. CVE-2018-5205 Joseph Bisch discovered that...
CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
FreeBSD : irssi -- multiple vulnerabilities (a3764767-f31e-11e7-95f2-005056925db4)
Irssi reports : When the channel topic is set without specifying a sender, Irssi may dereference NULL pointer. Found by Joseph Bisch. When using incomplete escape codes, Irssi may access data beyond the end of the string. Found by Joseph Bisch. A calculation error in the completion code could cau...
CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
Design/Logic Flaw
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
ALPINE-CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
UBUNTU-CVE-2018-5205
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string...
Fedora Update for nodejs-ansi FEDORA-2013-11780
Check for the Version of nodejs-ansi OpenVAS Vulnerability Test Fedora Update for nodejs-ansi FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...