openSUSE Security Update : kvm (openSUSE-2011-56)

Malicous clients could potentially exploit a heap based buffer overflow in the CCID card passthru device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-56. The text description...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

openSUSE Security Update : cvs (openSUSE-2012-133)

cvs was prone to a heap-based buffer overflow in the client side proxy handling %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-133. The text description of this plugin is C SUSE...

openSUSE Security Update : ldns (openSUSE-SU-2011:1161-1)

A boundary error in ldnsrrnewfrmstrinternal could lead to a heap-based buffer overfow when processing RR records CVE-2011-3581. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ldns-5289. The...

openSUSE Security Update : cgit (openSUSE-SU-2012:1422-1)

Specially crafted commits could trigger a heap-based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-752. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libyaml (openSUSE-SU-2014:0272-1)

This update fixes the following security issue with libyaml : - bnc860617: Fixed heap based buffer overflow due to integer misuse CVE-2013-6393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : cvs (openSUSE-SU-2012:0310-1)

A heap-based buffer overflow flaw was found in the way CVS read proxy connection HTTP responses. An attacker could exploit this to cause the application to crash or, potentially, execute arbitrary code in the context of the user running the application CVE-2012-0804. %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : libHX22 (openSUSE-SU-2010:0723-1)

This update fixes a heap-based buffer overflow in HXsplit of libHX. CVE-2010-2947 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libHX22-2976. The text description of this plugin is C SUSE LL...

openSUSE Security Update : libpng15 (openSUSE-SU-2014:0616-1)

This libpng update fixes the following security issue : - bnc873124: Fixed integer overflow leading to a heap-based buffer overflow in pngsetunknownchunks CVE-2013-7353. - bnc873123: integer overflow leading to a heap-based buffer overflow in pngsetsPLT and pngsettext2 CVE-2013-7354 %NASLMINLEVEL...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-xulrunner192 / etc (openSUSE-2012-120)

the embedded copy of libpng was prone to a heap based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-120. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0107-1)

A heap-based buffer overflow during decoding of entity references with overly long names has been fixed. CVE-2011-3919 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : nginx-1.0 (openSUSE-2011-48)

A flaw in the custom DNS resolver of nginx could lead to a heap based buffer overflow which could potentially allow attackers to execute arbitrary code or to cause a Denial of Service bnc731084, CVE-2011-4315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : libpng12 (libpng12-5846)

A heap-based buffer overflow in libpng was fixed that could potentially be exploited by attackers to execute arbitrary code or cause an application to crash CVE-2011-3026. libpng 1.2 was updated to 1.2.47 to fix this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : openjpeg (openSUSE-SU-2012:1370-1)

This update fixes a heap-based buffer overflow in OpenJPEG which could allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE Security Update : libpng14 (libpng14-5847)

A heap-based buffer overflow in libpng was fixed that could potentially be exploited by attackers to execute arbitrary code or cause an application to crash CVE-2011-3026. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0107-1)

A heap-based buffer overflow during decoding of entity references with overly long names has been fixed. CVE-2011-3919 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : cgit (openSUSE-SU-2012:1421-1)

Specially crafted commits could trigger a heap-based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-753. The text description of this plugin is C SUSE LLC...

Updated iceape packages fix multiple vulnerabilities

Updated iceape packages fix security issues: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow remote attackers to cause a denial of service memory corruption and...

FreeBSD : mumble -- NULL pointer dereference and heap-based buffer overflow (c2c8c84b-e734-11e3-9a25-5404a6a6412c)

Mumble reports : A malformed Opus voice packet sent to a Mumble client could trigger a NULL pointer dereference or an out-of-bounds array access. A malformed Opus voice packet sent to a Mumble client could trigger a heap-based buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 11.3 Security Update : libpng (SAT Patch Number 9170)

This libpng update fixes the following two overflow security issues. - Fixed integer overflow that could have lead to a heap-based buffer overflow in pngsetsPLT and pngsettext2. CVE-2013-7354. bnc873123 - Fixed integer overflow that could have lead to a heap-based buffer overflow in...