PT-2020-5165

Name of the Vulnerable Software and Affected Versions ProFTPD version 1.3.7 Description The issue is related to a use-after-free vulnerability in the alloc pool function of the ProFTPD FTP server. This vulnerability can be triggered by interrupting the data transfer channel, which can lead to...

Open-Xchange: SSRF - RSS feed, blacklist bypass (IP Formatting)

FYI - Tested on local installation of App Suite 7.8.4 REV 17 Hello, There appears to be a SSRF vulnerability in the below endpoint. This is due to a failure in the App Suite code when evaluating an IP address against a blacklist. The SSRF is limited to scanning hosts on port 80/443 but accuracy i...

Huawei VP9660 License Module Formatting String Vulnerability

Huawei VP9660 is a new-generation multimedia switching platform with 1080p60 full editing and decoding capability developed by Huawei, which is oriented to customer needs and combines the advantages of network equipment manufacturing. A formatting string vulnerability exists in the Huawei VP9660...

EulerOS 2.0 SP2 : irssi (EulerOS-SA-2017-1284)

According to the versions of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the...

EulerOS 2.0 SP1 : irssi (EulerOS-SA-2017-1283)

According to the versions of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the...

openSUSE Security Update : konversation (openSUSE-2017-1306)

This update for konversation fixes the following issues : Security issue fixed : - CVE-2017-15923: Fixed a crash in parsing IRC color formatting codes boo1068097. Bug fixes : - Update to version 1.7.4 : - Fixed a bug causing the size of a custom chat text view font set via the configuration dialo...

Debian DLA-1174-1 : konversation security update

It was discovered that there was a denial of service vulnerability in the konversation IRC client related to parsing of color formatting codes. For Debian 7 'Wheezy', this issue has been fixed in konversation version 1.4-1+deb7u2. We recommend that you upgrade your konversation packages. NOTE:...

MGASA-2017-0419 Updated konversation packages fix security vulnerability

Joseph Bisch discovered that Konversation could crash when parsing certain IRC color formatting codes CVE-2017-15923...

Updated konversation packages fix security vulnerability

Joseph Bisch discovered that Konversation could crash when parsing certain IRC color formatting codes CVE-2017-15923...

DEBIAN-CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

Design/Logic Flaw

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

UBUNTU-CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

CVE-2017-15923

CVE-2017-15923 affects Konversation (IRC client) up to version 1.7.x prior to fixes in 1.7.4. The root cause is a crash caused by parsing IRC color formatting codes, leading to a denial of service (crash). Public fixes exist: openSUSE/openSUSE-2017-1306 notes CVE-2017-15923 fixed in 1.7.4; Fedora...

CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

CVE-2017-15923: Undefined Security Weakness

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...