59 matches found
RUSTSEC-2020-0001 Stack overflow when resolving additional records from MX or SRV null targets
There's a stack overflow leading to a crash and potential DOS when processing additional records for return of MX or SRV record types from the server. This is only possible when a zone is configured with a null target for MX or SRV records, i.e. '.'. Example effected zone record: text no-service...
Stack overflow when resolving additional records from MX or SRV null targets
There's a stack overflow leading to a crash and potential DOS when processing additional records for return of MX or SRV record types from the server. This is only possible when a zone is configured with a null target for MX or SRV records, i.e. '.'. Example effected zone record: text no-service...
openSUSE Security Update : qemu (openSUSE-2019-2505)
This update for qemu fixes the following issues : - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 - Fix use-after-free in slirp CVE-2018-20126 bsc1119991 - Fix potential DOS in lsi scsi controller emulation CVE-2019-12068 bsc1146873 - Expose taa-no 'feature',...
SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2019:2954-1)
This update for qemu fixes the following issues : Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 Fix use-after-free in slirp CVE-2018-20126 bsc1119991 Fix potential DOS in lsi scsi controller emulation CVE-2019-12068 bsc1146873 Expose taa-no 'feature', indicating CP...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Authentication flaw
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself...
FreeBSD : bro -- array bounds and potential DOS issues (d0be41fe-2a20-4633-b057-4e8b25c41780)
Corelight reports : Bro 2.5.5 primarily addresses security issues : - Fix array bounds checking in BinPAC: for arrays that are fields within a record, the bounds check was based on a pointer to the start of the record rather than the start of the array field, potentially resulting in a buffer...
DLA-393-1 srtp - security update
Bulletin has no description...
openSUSE Security Update : vte/gnome-terminal (openSUSE-SU-2012:0931-1)
Add vte-CVE-2011-2198.patch: fix memory exhaustion through malicious escape sequences. Fix bnc699214, CVE-2011-2198 openSUSE 11.4 only. - Add vte-CVE-2012-2738.patch: fix potential DoS through malicious escape sequences. Fix bnc772761, CVE-2012-2738. %NASLMINLEVEL 70300 C Tenable Network...
use-after-free in libxl_list_cpupool under memory pressure
ISSUE DESCRIPTION If realloc3 fails then libxllistcpupool will incorrectly return the now-free original pointer. IMPACT An attacker may be able to cause a multithreaded toolstack using this function to race against itself leading to heap corruption and a potential DoS. Depending on the malloc...
Fedora 18 : python-pip-1.3.1-4.fc18 (2013-13140)
Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...
Fedora 17 : python-pip-1.3.1-4.fc17 (2013-13213)
Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...
Fedora 19 : python-pip-1.3.1-4.fc19 (2013-13216)
Fix potential DOS with specially crafted malicious SSL certs. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Backing out rename of pip binary to fix 958377 and updating package summary to match upstream's description. Note that Tenable...
Fedora Core 10 FEDORA-2009-2686 (mod_security)
The remote host is missing an update to modsecurity announced via advisory FEDORA-2009-2686. OpenVAS Vulnerability Test $Id: fcore20092686.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2686 modsecurity Authors: Thomas Reinke Copyright: Copyright c...
FreeBSD : trac -- potential DOS vulnerability (c89a3ebb-ae07-11dd-b4b2-001f3c8eabeb)
Trac development team reports : 0.11.2 is a new stable maintenance release. It contains several security fixes and everyone is recommended to upgrade their installations. Bug fixes : Fixes potential DOS vulnerability with certain wiki markup. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
[SECURITY] [DSA 736-2] New spamassassin packages fix potential DOS
------------------------------------------------------------------------ Debian Security Advisory DSA 736-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
[SECURITY] [DSA 738-1] New razor packages fix potential DOS
------------------------------------------------------------------------ Debian Security Advisory DSA 738-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
[SECURITY] [DSA 736-1] New spamassassin packages fix potential DOS
------------------------------------------------------------------------ Debian Security Advisory 736-1 [email protected] http://www.debian.org/security/ Michael Stone July 01, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
finjanSurfinGate.txt
VENDOR: Finjan www.finjan.com PRODUCT: SurfinGate recently renamed Vital Security VERSIONS: All releases of versions 6 & 7 as of 1/22/2004. Older versions have not been tested. NOTIFICATION: The vendor has known of the problem over a year DESCRIPTION...