4796 matches found
GnuTLS 2.6.x libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing
No description provided by source. source: http://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A signature-verification vulnerability An...
GnuTLS libgnutls Double-free Certificate List Parsing Remote DoS
No description provided by source. Sorry I forgot to write headers in previous mail. Exploit Title: possible ways to exploit CVE-2012-1663 GNUTLS-3.0.13 Google Dork: if relevant we will automatically add these to the GHDB Date: Mar 20, 2013 Exploit Author: Shawn the R0ck Vendor Homepage:...
GnuTLS 2.6.x libgnutls lib/pk-libgcrypt.c Malformed DSA Key Handling Remote DoS
No description provided by source. source: http://www.securityfocus.com/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A signature-verification vulnerability An...
gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3)
A flaw was found in the way GnuTLS parsed session IDs from ServerHello messages of the TLS/SSL handshake. A malicious server could use this flaw to send an excessively long session ID value, which would trigger a buffer overflow in a connecting TLS/SSL client application using GnuTLS, causing the...
libtasn1: multiple boundary check issues
Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service out-of-bounds read via crafted ASN.1 data...
Important: Red Hat Security Advisory: rhev-hypervisor6 security update
An updated rhev-hypervisor6 package that fixes several security issues is now available. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...
SOL15345 - GnuTLS vulnerability CVE-2014-3466
Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...
Fedora Update for mingw-gnutls FEDORA-2014-6963
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mingw-gnutls FEDORA-2014-6953
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for gnutls FEDORA-2014-6881
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-201406-09 : GnuTLS: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201406-09 GnuTLS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could utilize multiple vectors to spoof...
openSUSE Security Update : gnutls (openSUSE-SU-2012:0215-1)
Large server tickets could crash gnutls clients. CVE-2011-4128 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnutls-5699. The text description of this plugin...
openSUSE Security Update : gnutls (openSUSE-SU-2013:0807-1)
Changes in gnutls : - Fix bug bnc802651 CVE-2013-1619 gnutls: Luck-13 issue Add patch file: CVE-2013-1619.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-428. The text...
openSUSE Security Update : gnutls (openSUSE-SU-2012:0620-1)
3 vulnerabilities were discovered for the gnutls packages in openSUSE version 12.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-277. The text description of this plugin is C...
openSUSE Security Update : gnutls (openSUSE-SU-2014:0763-1)
gnutls was patched to fix two security vulnerabilities that could be used to disrupt service or potentially allow remote code execution. - Memory corruption during connect CVE-2014-3466 - NULL pointer dereference in gnutlsx509dnoidname CVE-2014-3465 %NASLMINLEVEL 70300 C Tenable Network Security,...
openSUSE Security Update : gnutls (openSUSE-SU-2014:0325-1)
The gnutls library was updated to fixed x509 certificate validation problems, where man-in-the-middle attackers could hijack SSL connections. This update also reenables Elliptic Curve support to meet current day cryptographic requirements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
openSUSE Security Update : openconnect (openSUSE-SU-2013:0979-1)
This version update fixes several bugs : - Frequent connection drops fixed bnc817152. - Update to version 4.09 - Fix overflow on HTTP request buffers CVE-2012-6128bnc803347 - Fix connection to servers with round-robin DNS with two-stage auth/connect. - Impose minimum MTU of 1280 bytes. - Fix some...
openSUSE Security Update : gnutls (openSUSE-SU-2013:0283-1)
fix gnutls double free bnc752193, CVE-2012-1663.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-110. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : filezilla (openSUSE-SU-2013:1347-1)
FileZilla was updated to version 3.7.3 to add various features, fix bugs and also security issues in the embedded putty ssh client. Full changelog: https://filezilla-project.org/changelog.php - Noteworthy changes : - Apply a fix for a security vulnerability in PuTTY as used in FileZilla to handle...
openSUSE Security Update : gnutls (openSUSE-SU-2010:1025-2)
This update fixes the safe renegotiation testing code which was missing in the previous update for CVE-2009-3555. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnutls-3647. The text...