334 matches found
Spoofing
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions" and a denial of service...
Buffer overflow
An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in radcoalesce" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...
Denial of service
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
CVE-2017-10978
FreeRADIUS is affected by CVE-2017-10978 (and related CVEs) with out-of-bounds memory handling in packet processing. The primary publicly documented issue for CVE-2017-10978 is an out-of-bounds read/write in make_secret() that can cause a crash and, in some disclosures, potential code execution, ...
CVE-2017-10981
CVE-2017-10981 affects FreeRADIUS 2.x prior to 2.2.10 with a DHCP memory leak in fr_dhcp_decode() that can lead to a denial of service. The vulnerability is fixed by upgrading FreeRADIUS to 2.2.10+ (or applying vendor advisories). Public references in the connected documents confirm the issue and...
CVE-2017-10986
FreeRADIUS 3.x prior to 3.0.15 is affected by CVE-2017-10986. The issue is an out-of-bounds read in the dhcp_attr2vp() function when decoding string DHCP options, which could trigger a denial of service via crafted packets. Arch Linux advisory confirms the vulnerability and lists upgrading to 3.0...
CVE-2017-10987
CVE-2017-10987 affects FreeRADIUS Server (FreeRADIUS 3.x prior to 3.0.15). The issue is a DHCP-related out-of-bounds read in fr_dhcp_decode_suboptions(), leading to a denial-of-service (server crash) when processing crafted DHCP packets. Connected advisories/ Nessus entries corroborate multiple D...
CVE-2017-10983
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...
CVE-2017-10982
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions" and a denial of service...
CVE-2017-10978
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...
CVE-2017-10980
An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...
CVE-2017-10978
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...
neukirchen.ooe.gv.at XSS vulnerability
Vulnerable URL: http://www.neukirchen.ooe.gv.at/system/web/suche.aspx?search="-confirmopenbugbounty-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...
haibach-donau.ooe.gv.at XSS vulnerability
Vulnerable URL: http://www.haibach-donau.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...
edt.ooe.gv.at XSS vulnerability
Vulnerable URL: http://www.edt.ooe.gv.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...
CVE-2004-1717
Multiple buffer overflows in the psscan function in ps.c for gv ghostview allow remote attackers to execute arbitrary code via a Postscript file with a long 1 BoundingBox, 2 comment, 3 Orientation, 4 PageOrder, or 5 Pages value...
gv-seefeld.ch XSS vulnerability
Open Bug Bounty ID: OBB-82230 Description| Value ---|--- Affected Website:| gv-seefeld.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of the Red Hat Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the gv-3.5.8 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the gv package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the gnome-gv package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...