CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

CVE-2014-3564

CVE-2014-3564 affects the GPGME library (status_handler) in engine-gpgsm.c and engine-uiserver.c, with multiple heap-based buffer overflows that allow remote denial of service and possibly arbitrary code execution via vectors related to different line lengths in a specific order. Affected: GPGME ...

Mandriva Linux Security Advisory : gpgme (MDVSA-2014:160)

Updated gpgme packages fix security vulnerability : A heap-based buffer overflow in gpgme before 1.5.1 could allow a specially crafted certificate to cause crashes or potentially cause arbitrary code execution CVE-2014-3564. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

SuSE 11.3 Security Update : gpgme (SAT Patch Number 9644)

This gpgme update fixes the following security issue : - Fix possible overflow in gpgsm and uiserver engines CVE-2014-3564. bnc890123 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

Updated gpgme packages fix CVE-2014-3564

Updated gpgme packages fix security vulnerability: A heap-based buffer overflow in gpgme before 1.5.1 could allow a specially crafted certificate to cause crashes or potentially cause arbitrary code execution CVE-2014-3564...

MGASA-2014-0340 Updated gpgme packages fix CVE-2014-3564

Updated gpgme packages fix security vulnerability: A heap-based buffer overflow in gpgme before 1.5.1 could allow a specially crafted certificate to cause crashes or potentially cause arbitrary code execution CVE-2014-3564...

openSUSE Security Update : gpgme (openSUSE-SU-2014:1039-1)

This gpgme update to version 1.4.4 fixes the following security and non i security issues : - Fixed possible overflow in gpgsm and uiserver engines. CVE-2014-3564, bnc890123 - Fixed possibled segv in gpgmeopcardedit. - Fixed minor memleaks and possible zombie processes. - Fixed prototype...

DLA-39-1 gpgme1.0 - security update

Bulletin has no description...

[SECURITY] [DSA 3005-1] gpgme1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3005-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 14, 2014 http://www.debian.org/security/faq -...

DSA-3005-1 gpgme1.0 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3005-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2307-1] GPGME vulnerability

========================================================================== Ubuntu Security Notice USN-2307-1 August 06, 2014 gpgme1.0 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 14.04 LTS : GPGME vulnerability (USN-2307-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2307-1 advisory. Tom Trnka discovered that GPGME incorrectly handled certain certificate line lengths. An attacker could use this issue to cause applications using GPGME to crash,...

USN-2307-1 gpgme1.0 vulnerability

Tomáš Trnka discovered that GPGME incorrectly handled certain certificate line lengths. An attacker could use this issue to cause applications using GPGME to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-2307-1: GPGME vulnerability

Tomáš Trnka discovered that GPGME incorrectly handled certain certificate line lengths. An attacker could use this issue to cause applications using GPGME to crash, resulting in a denial of service, or possibly execute arbitrary code...

FreeBSD : gpgme -- heap-based buffer overflow in gpgsm status handler (90ca3ba5-19e6-11e4-8616-001b3856973b)

Tomas Trnka reports : Gpgme contains a buffer overflow in the gpgsm status handler that could possibly be exploited using a specially crafted certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...

CVE-2014-3564

Multiple heap-based buffer overflows in the statushandler function in 1 engine-gpgsm.c and 2 engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."...

gpgme -- heap-based buffer overflow in gpgsm status handler

Tomas Trnka reports: Gpgme contains a buffer overflow in the gpgsm status handler that could possibly be exploited using a specially crafted certificate...

SuSE 11 Security Update : KDE4 PIM packages (SAT Patch Number 808)

This kdepim4 and kdepimlibs4 update fixes lots of bugs and one security issue : KMail 4.1.x executes links in mail without confirmation. no cve assigned yet It also fixes lots of non-security bugs : kdepim4 : - kdepim: make sure we initially create items for subresources - kdepim: fix...