openSUSE Security Update : nginx-0.8 (openSUSE-SU-2012:0237-1)

A flaw in the custom DNS resolver of nginx could lead to a heap based buffer overflow which could potentially allow attackers to execute arbitrary code or to cause a Denial of Service bnc731084, CVE-2011-4315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : perl (openSUSE-SU-2011:1278-1)

This update of Perl fixes a heap based buffer overflow in the decodexs function CVE-2011-2939, bnc728662. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-5471. The text description of thi...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2011:0405-1)

Specially crafted tiff files could cause a heap-based buffer overflow in the thunder- and ojpeg-decoders CVE-2011-1167, CVE-2009-5022. Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

openSUSE Security Update : libvorbis (openSUSE-2012-141)

Specially crafted ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE Security Update : libcgroup-devel (openSUSE-SU-2011:0316-1)

libcgroup suffered from a heap based buffer overflow CVE-2011-1006. The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events CVE-2011-1022. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Debian: Security Advisory (DSA-2959-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2011:0405-1)

Specially crafted tiff files could cause a heap-based buffer overflow in the thunder- and ojpeg-decoders CVE-2011-1167, CVE-2009-5022. Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

openSUSE Security Update : kvm (openSUSE-2011-56)

Malicous clients could potentially exploit a heap based buffer overflow in the CCID card passthru device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-56. The text description...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

openSUSE Security Update : libpng12 (openSUSE-SU-2014:0618-1)

This libpng12 update fixes the following two security issues. - bnc873123: Fixed integer overflow leading to a heap-based buffer overflow in pngsetsPLT and pngsettext2 CVE-2013-7354. - bnc873124: Fixed integer overflow leading to a heap-based buffer overflow in pngsetunknownchunks CVE-2013-7353...

openSUSE Security Update : cvs (openSUSE-2012-133)

cvs was prone to a heap-based buffer overflow in the client side proxy handling %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-133. The text description of this plugin is C SUSE...

openSUSE Security Update : ghostscript (openSUSE-SU-2012:1289-1)

The following security issue was fixed in ghostscript : Multiple integer underflows in the icmLutallocate function in International Color Consortium ICC Format library icclib, as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service crash...

openSUSE Security Update : libyaml (openSUSE-SU-2014:0272-1)

This update fixes the following security issue with libyaml : - bnc860617: Fixed heap based buffer overflow due to integer misuse CVE-2013-6393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : cgit (openSUSE-SU-2012:1422-1)

Specially crafted commits could trigger a heap-based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-752. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libpng15 (openSUSE-SU-2014:0616-1)

This libpng update fixes the following security issue : - bnc873124: Fixed integer overflow leading to a heap-based buffer overflow in pngsetunknownchunks CVE-2013-7353. - bnc873123: integer overflow leading to a heap-based buffer overflow in pngsetsPLT and pngsettext2 CVE-2013-7354 %NASLMINLEVEL...

openSUSE Security Update : cvs (openSUSE-SU-2012:0310-1)

A heap-based buffer overflow flaw was found in the way CVS read proxy connection HTTP responses. An attacker could exploit this to cause the application to crash or, potentially, execute arbitrary code in the context of the user running the application CVE-2012-0804. %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : libHX22 (openSUSE-SU-2010:0723-1)

This update fixes a heap-based buffer overflow in HXsplit of libHX. CVE-2010-2947 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libHX22-2976. The text description of this plugin is C SUSE LL...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0107-1)

A heap-based buffer overflow during decoding of entity references with overly long names has been fixed. CVE-2011-3919 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : nginx-1.0 (openSUSE-2011-48)

A flaw in the custom DNS resolver of nginx could lead to a heap based buffer overflow which could potentially allow attackers to execute arbitrary code or to cause a Denial of Service bnc731084, CVE-2011-4315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...