468 matches found
MGASA-2015-0009 Updated libevent packages fix CVE-2014-6272
Updated libevent packages fix security vulnerability: Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In...
Updated libevent packages fix CVE-2014-6272
Updated libevent packages fix security vulnerability: Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In...
Debian DSA-3119-1 : libevent - security update
Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In order to exploit this flaw, an attacker needs to be abl...
[SECURITY] [DSA 3119-1] libevent security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3119-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3119-1] libevent security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3119-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 06, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3119-1 (libevent - security update)
Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In order to exploit this flaw, an attacker needs to be abl...
DSA-3119-1 libevent - security update
Bulletin has no description...
CVE-2014-6272
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...
UBUNTU-CVE-2014-6272
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...
libevent -- integer overflow in evbuffers
Debian Security Team reports: Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In order to exploit this fla...
Debian: Security Advisory (DSA-3119-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DNS Label Compression Recursion Denial of Service - Ver2 (CVE-2007-1030)
A denial-of-service vulnerability has been reported in Niels Provos Libevent. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...
SuSE 11.3 Security Update : libevent (SAT Patch Number 9824)
This update fixes a buffer overflow in the buffered event handling in libevent. CVE-2014-6272 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...
[SSLsplit] Transparent and scalable SSL/TLS interception
SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. Connections are transparently intercepted through a network address translation engine and redirected to SSLsplit. SSLsplit terminates SSL/TLS and initiates a new SSL/TLS connection to the original...
[SECURITY] Fedora 18 Update: pgbouncer-1.5.3-1.fc18
pgbouncer is a lightweight connection pooler for PostgreSQL. pgbouncer uses libevent for low-level socket handling...
RedHat 5.4 under the Web server architecture of the source code to build LNMP environment-vulnerability warning-the black bar safety net
A, RedHat 5.4 under theWeb serverthe architecture of the source code to build LNMP environment As a lightweight HTTP server, Nginx with Apache as compared to the compact and exquisite: in the performance, it takes up very little system resources, can support more concurrent connections, to achiev...
CVE-2011-0490
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...
DEBIAN-CVE-2011-0490
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...
Code injection
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...
CVE-2011-0490
CVE-2011-0490 affects Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha; the issue stems from calls to Libevent within Libevent log handlers, which could allow a remote attacker to cause a denial of service (daemon crash) via log-triggered vectors. Connected documents confirm affected Tor...