793 matches found
kernel: security and bugfix update (important)
The Linux kernel was updated to fix security issues and bugs. Security issues fixed: CVE-2014-3153: The futexrequeue function in kernel/futex.c in the Linux kernel did not ensure that calls have two different futex addresses, which allowed local users to gain privileges via a crafted FUTEXREQUEUE...
[musl] Security advisory for musl libc - remote stack-based buffer overflow in DNS response parsing [CVE-2014-3484]
A remote stack-based buffer overflow has been found in musl libc's dns response parsing code. The overflow can be triggered in programs linked against musl libc and making dns queries via one of the standard interfaces getaddrinfo, getnameinfo, gethostbyname, gethostbyaddr, etc. if one of the...
openSUSE Security Update : libsndfile (openSUSE-SU-2011:0855-1)
An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : glibc (openSUSE-2012-32)
Fix timezone loader overflow bnc735850,CVE-2009-5029 patch tzfile-corruption-fix.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-32. The text description of this plugin is...
openSUSE Security Update : libsndfile (openSUSE-SU-2011:0854-1)
An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Additionally an divide by zero CVE-2009-4835 has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
openSUSE Security Update : gdk-pixbuf (openSUSE-SU-2012:0897-1)
Fix integer overflow in XBM file loader. Fix bnc762735, CVE-2012-2370. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-409. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : glibc (openSUSE-SU-2012:0064-1)
Specially crafted time zone files could cause a heap overflow in glibc CVE-2009-5029. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update glibc-5554. The text description of this plugin is C SUSE...
Oracle Linux 6 : gnutls (ELSA-2014-0595)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0595 advisory. 2.8.5-14 - fix session ID length check 1102024 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
Oracle Linux 6 : mutt (ELSA-2014-0304)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0304 advisory. 5:1.5.20-4.20091214hg736b6a - Resolves: 1075872 CVE-2014-0467, heap-based buffer overflow when parsing certain headers Tenable has extracted the preceding...
Debian Security Advisory DSA 2852-1 (libgadu - heap-based buffer overflow)
Yves Younan and Ryan Pentney discovered that libgadu, a library for accessing the Gadu-Gadu instant messaging service, contained an integer overflow leading to a buffer overflow. Attackers which impersonate the server could crash clients and potentially execute arbitrary code. OpenVAS Vulnerabili...
Oracle Linux 5 : cscope (ELSA-2009-1102)
The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1102 advisory. 15.5-15.1.el53.1 - Release bump to create newer nvr despite dist tag change fc6 - el5 15.5-15.el53.4 - Merge incdir-overflow and snprintf patches for...
MGASA-2013-0172 Updated php packages fix security vulnerabilies
Heap based buffer overflow in quotedprintableencode in PHP before version 5.4.16 CVE-2013-2110. Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service applicati...
mesa security update
6.5.1-7.11 - CVE-2013-1993 - buffer overflows in DRI protocol 963066...
Debian Security Advisory DSA 2623-1 (openconnect - buffer overflow)
Kevin Cernekee discovered that a malicious VPN gateway can send crafted responses which trigger stack-based buffer overflows. OpenVAS Vulnerability Test $Id: deb2623.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2623-1 using nvtgen 1.0 Script version: 1.0 Author:...
RedHat Update for libproxy RHSA-2012:1461-01
Check for the Version of libproxy OpenVAS Vulnerability Test RedHat Update for libproxy RHSA-2012:1461-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Slackware Advisory SSA:2008-062-01 espgs/ghostscript
The remote host is missing an update as announced via advisory SSA:2008-062-01. OpenVAS Vulnerability Test $Id: esoftslkssa200806201.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2006-230-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] t1lib
New t1lib packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/t1lib-5.1.2-i486-3slack13.37.txz: Rebuilt. Patched various overflows, crashes, and pointer bugs. For more...
Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow
Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/49444/info Cerberus FTP Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...