openSUSE Security Update : cpio (openSUSE-SU-2014:1643-1)

This cpio update fixes the following secuirty issue : - fix an OOB write with cpio -i bnc907456 CVE-2014-9112 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-771. The text...

Kernel: HID: logitech-dj OOB array access

An out-of-bounds read flaw was found in the way the Logitech Unifying receiver driver handled HID reports with an invalid deviceindex value. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system...

FreeBSD : chromium -- multiple vulnerabilities (963413a5-bf50-11e3-a2d6-00262d5ed8ee)

Google Chrome Releases reports : 31 vulnerabilities fixed in this release, including : - 354123 High CVE-2014-1716: UXSS in V8. Credit to Anonymous. - 353004 High CVE-2014-1717: OOB access in V8. Credit to Anonymous. - 348332 High CVE-2014-1718: Integer overflow in compositor. Credit to Aaron...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 31 vulnerabilities fixed in this release, including: 354123 High CVE-2014-1716: UXSS in V8. Credit to Anonymous. 353004 High CVE-2014-1717: OOB access in V8. Credit to Anonymous. 348332 High CVE-2014-1718: Integer overflow in compositor. Credit to Aaron Staple...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 33.0.1750.152 Platform version: 5116.115.4/5116.115.5 for all devices. This build contains security fixes for Pwnium. Systems will be receiving the updates over the next few days. Security Fixes and Rewards Congratulations to geohot for an epic Pwnium...

Fedora 19 : libtiff-4.0.3-9.fc19 (2013-15679)

OOB Write in LZW decompressor Man page fixing Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SuSE 11.3 Security Update : Mesa (SAT Patch Number 8011)

A memory corruption in the Mesa Intel drivers OOB read/write has been fixed. CVE-2013-1872 This could have been potentially exploited by remote attackers who would have been able to inject 3d graphics into the attacked desktop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

RHEL 6 : mesa (RHSA-2013:0897)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0897 advisory. - Mesa: Memory corruption OOB read/write on intel drivers CVE-2013-1872 - Mesa: Multiple integer overflows leading to heap-based bufer...

SuSE 11.2 Security Update : freetype2 (SAT Patch Number 7232)

This update fixes : - OOB access in bdffreefont and bdfparseglyphs CVE-2012-5668 / CVE-2012-5669 As well as the following non-security bugs : - bdf Savannah bug 37905. - src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in - bdf F...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 8433)

This update fixes : - OOB access in bdffreefont CVE-2012-5668 As well as non-security bugs : - bdf Savannah bug 37905. o src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 138208 High CVE-2012-2900: Crash in Skia text rendering. Credit to Atte Kettunen of OUSPG. 147499 Critical CVE-2012-5108: Race condition in audio device handling. Credit to Atte Kettunen of OUSPG. 148692 Medium CVE-2012-5109: OOB read in ICU regex. Credit to Arthur...

RHEL 5 / 6 : ghostscript (RHSA-2012:1256)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1256 advisory. - ghostscript, argyllcms: Array index error leading to heap-based bufer OOB write CVE-2012-4405 Note that Nessus has not tested for this issue bu...

Mandriva Linux Security Advisory : mozilla (MDVSA-2012:110-1)

Security issues were identified and fixed in mozilla firefox and thunderbird : Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...

qemu-kvm security and bug fix update

qemu-kvm-0.12.1.2-2.160.el61.2 - kvm-virtio-guard-against-negative-vq-notifies.patch bz717403 - Resolves: bz717403 qemu-kvm: OOB memory access caused by negative vq notifies rhel-6.1.z qemu-kvm-0.12.1.2-2.160.el61 - kvm-Fix-phys-memory-client-pass-guest-physical-address-n.patch bz701771 -...

Google Chrome 4.1 OOB Array Indexing Bug

Exploit for windows platform in category dos / poc ======================================== Google Chrome 4.1 OOB Array Indexing Bug ======================================== Author: Tobias Klein tk at trapkit.de Affected Software: Google Chrome = 4.1.249.1042 Build 42199 Remotely Exploitable: Yes...

Google Chrome 4.1 - Out-of-Bounds Array Indexing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Google Chrome OOB Array Indexing Bug Advisory ID: TKADV2010-004 Revision: 1.0 Release Date: 2010/03/31 Last Modified: 2010/03/31 Date Reported: 2010/03/21 Author: Tobias Klein tk at trapkit.de Affected Software: Google Chrome = 4.1.249.1042...

kernel security and bug fix update

2.6.9-67.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

Heimdal ftpd/tnftpd/lukemftpd signal handling race conditions

Problem with OOB data processing...

Multiple Vendor Out Of Band Data DoS (WinNuke)

It was possible to crash the remote host using the 'Winnuke' attack, that is to send an OOB message to this port. An attacker may use this flaw to make this host crash continuously, preventing the system from working properly. C Tenable Network Security, Inc. include"compat.inc"; if description...