openSUSE Security Update : perl (openSUSE-SU-2011:1278-1)

This update of Perl fixes a heap based buffer overflow in the decodexs function CVE-2011-2939, bnc728662. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-5471. The text description of thi...

openSUSE Security Update : libvorbis (openSUSE-SU-2012:0319-1)

Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code CVE-2012-0444. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : libvorbis (openSUSE-2012-141)

Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : nginx-0.8 (openSUSE-SU-2012:0237-1)

A flaw in the custom DNS resolver of nginx could lead to a heap based buffer overflow which could potentially allow attackers to execute arbitrary code or to cause a Denial of Service bnc731084, CVE-2011-4315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2011:0405-1)

Specially crafted tiff files could cause a heap-based buffer overflow in the thunder- and ojpeg-decoders CVE-2011-1167, CVE-2009-5022. Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

openSUSE Security Update : libcgroup-devel (openSUSE-SU-2011:0316-1)

libcgroup suffered from a heap based buffer overflow CVE-2011-1006. The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events CVE-2011-1022. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2011:0405-1)

Specially crafted tiff files could cause a heap-based buffer overflow in the thunder- and ojpeg-decoders CVE-2011-1167, CVE-2009-5022. Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

openSUSE Security Update : kvm (openSUSE-2011-56)

Malicous clients could potentially exploit a heap based buffer overflow in the CCID card passthru device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-56. The text description...

openSUSE Security Update : libpng12 (openSUSE-SU-2014:0618-1)

This libpng12 update fixes the following two security issues. - bnc873123: Fixed integer overflow leading to a heap-based buffer overflow in pngsetsPLT and pngsettext2 CVE-2013-7354. - bnc873124: Fixed integer overflow leading to a heap-based buffer overflow in pngsetunknownchunks CVE-2013-7353...

openSUSE Security Update : cgit (openSUSE-SU-2012:1422-1)

Specially crafted commits could trigger a heap-based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-752. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : cvs (openSUSE-2012-133)

cvs was prone to a heap-based buffer overflow in the client side proxy handling %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-133. The text description of this plugin is C SUSE...

openSUSE Security Update : libyaml (openSUSE-SU-2014:0272-1)

This update fixes the following security issue with libyaml : - bnc860617: Fixed heap based buffer overflow due to integer misuse CVE-2013-6393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : ghostscript (openSUSE-SU-2012:1289-1)

The following security issue was fixed in ghostscript : Multiple integer underflows in the icmLutallocate function in International Color Consortium ICC Format library icclib, as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service crash...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0107-1)

A heap-based buffer overflow during decoding of entity references with overly long names has been fixed. CVE-2011-3919 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libHX22 (openSUSE-SU-2010:0723-1)

This update fixes a heap-based buffer overflow in HXsplit of libHX. CVE-2010-2947 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libHX22-2976. The text description of this plugin is C SUSE LL...

openSUSE Security Update : libpng15 (openSUSE-SU-2014:0616-1)

This libpng update fixes the following security issue : - bnc873124: Fixed integer overflow leading to a heap-based buffer overflow in pngsetunknownchunks CVE-2013-7353. - bnc873123: integer overflow leading to a heap-based buffer overflow in pngsetsPLT and pngsettext2 CVE-2013-7354 %NASLMINLEVEL...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-xulrunner192 / etc (openSUSE-2012-120)

the embedded copy of libpng was prone to a heap based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-120. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : cvs (openSUSE-SU-2012:0310-1)

A heap-based buffer overflow flaw was found in the way CVS read proxy connection HTTP responses. An attacker could exploit this to cause the application to crash or, potentially, execute arbitrary code in the context of the user running the application CVE-2012-0804. %NASLMINLEVEL 70300 C Tenable...