9889 matches found
CVE-2013-2852
Format string vulnerability in the b43requestfirmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe...
PT-2013-3972
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9.4 Description The issue allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md mod/parameters/new array in order to create a crafted /dev/md...
CVE-2013-2851: Use of Externally-Controlled Format String
Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/mdmod/parameters/newarray in order to create a crafted /dev/md device nam...
CVE-2013-2852: Use of Externally-Controlled Format String
Format string vulnerability in the b43requestfirmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe...
PT-2013-6356
Name of the Vulnerable Software and Affected Versions FlightGear affected versions not specified Description The issue is related to improper handling of format strings in FlightGear when it is started with remote access allowances. A remote attacker could potentially connect to FlightGear, set...
Fedora 17 : FlightGear-2.6.0-3.fc17 (2013-8721)
This update adds a fix to an uncontrolled format string vulnerability discovered in the cloud layers handling code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...
Fedora 18 : FlightGear-2.8.0-2.fc18 (2013-8703)
This update adds a fix to an uncontrolled format string vulnerability discovered in the cloud layers handling code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...
Fedora 19 : FlightGear-2.10.0-5.fc19 (2013-8622)
This update adds a fix to an uncontrolled format string vulnerability discovered in the cloud layers handling code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...
DEBIAN-CVE-2013-3560
The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...
Format string
The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...
UBUNTU-CVE-2013-3560
The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...
CVE-2013-3560
CVE-2013-3560 affects Wireshark 1.8.x before 1.8.7, where the MPEG DSM-CC dissector in epan/dissectors/packet-mpeg-dsmcc.c uses an incorrect format string in the dissect_dsmcc_un_download function. This flaw can allow remote attackers to trigger a denial of service (application crash) by sending ...
CVE-2013-3560
The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...
CVE-2013-3560
The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...
PT-2013-4480
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to the dissect dsmcc un download function in the MPEG DSM-CC dissector, which uses an incorrect format string. This allows remote attackers to cause a denial of service,...
CVE-2013-3560: Use of Externally-Controlled Format String
The dissectdsmccundownload function in epan/dissectors/packet-mpeg-dsmcc.c in the MPEG DSM-CC dissector in Wireshark 1.8.x before 1.8.7 uses an incorrect format string, which allows remote attackers to cause a denial of service application crash via a malformed packet...
Important: Red Hat Security Advisory: pki-tps security update
An updated pki-tps package that fixes two security issues is now available for Red Hat Certificate System 8.1. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...
System: pki-tps format string injection
Format string vulnerability in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in...
kernel: ext3: format string issues
fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application...
Python RRDtool Module - Function Format String
Python RRDtool Module - Function Format String / source: https://www.securityfocus.com/bid/60004/info The RRDtool module for Python is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary code...