SUSE SLES11 Security Update : libksba (SUSE-SU-2016:1509-1)

This update for libksba fixes the following issues : - CVE-2016-4579: Out-of-bounds read in ksbaberparsetl - CVE-2016-4574: two OOB read access bugs remote DoS bsc979261 Also adding reliability fixes from v1.3.4. Note that Tenable Network Security has extracted the preceding description block...

Cogent DataHub < 6.4.3 OPC Client Reconnection Saturation Remote DoS

Binary data scadacogentdatahub643.nbin...

Cogent DataHub < 6.4.7 Incoming DDE Connection Handling Remote DoS

Binary data scadacogentdatahub647.nbin...

MongoDB mongod Malformed X.509 Certificate Handling Remote DoS Vulnerability - Linux

MongoDB is prone to remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb";...

Design/Logic Flaw

imlib2 before 1.4.9 allows remote attackers to cause a denial of service divide-by-zero error and application crash by drawing a 2x1 ellipse...

CVE-2016-4476

CVE-2016-4476 details (normal mode) Affected: hostapd up to 2.5 and wpa_supplicant up to 2.5 (examples in Arch, Mageia, Debian advisories) where passphrase parameters are not rejected for newline/CR characters during WPS operations or local config changes. Impact: remote attacker can cause a deni...

Rockwell Automation/Allen-Bradley MicroLogix 1400 1766-L32xxx Series A < 7.000 / Series B <= 11.000 HTTP Remote DoS

Binary data 7199.pasl...

PT-2016-5899 · Kde +2 · Libksba +2

Name of the Vulnerable Software and Affected Versions: Libksba versions prior to 1.3.3 Description: The issue arises from improper handling of decoder stack overflows in the ber-decoder.c file, allowing remote attackers to cause a denial of service abort by sending crafted BER data...

HP System Management Homepage (SMH) AddXECert Remote DoS

The HP System Management Homepage SMH application running on the remote web server is affected by a denial of service vulnerability due to improper handling of the Common Name in a certificate uploaded via /proxy/AddXECert. An unauthenticated, remote attacker can exploit this, via a crafted...

Squid remote denial of service vulnerability analysis-vulnerability warning-the black bar safety net

Introduction The Squid Cache is an HTTP proxy server software. The Squid a wide range of uses, can be used as a cache server, may filter traffic help network security, but also can be used as a proxy server in the chain of a ring, the up-level proxy to forward the data or directly connected to th...

Fedora 23 : qemu-2.4.0.1-1.fc23 (2015-ca9f0952f1)

Rebased to version 2.4.0.1 CVE-2015-7295: virtio-net possible remote DoS bz 1264393 drive-mirror: Fix coroutine reentrance bz 1266936 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

FreeProxy Internet Suite 4.10 - Denial of Service

Exploit Title: Freeproxy Internet Suite 4.10 Remote DoS Date: 01/03/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: http://www.handcraftedsoftware.org/ Software Link:...

FreeBSD : squid -- remote DoS in HTTP response processing (660ebbf5-daeb-11e5-b2bd-002590263bf5)

Squid security advisory 2016:2 reports : Due to incorrect bounds checking Squid is vulnerable to a denial of service attack when processing HTTP responses. These problems allow remote servers delivering certain unusual HTTP response syntax to trigger a denial of service for all clients accessing...

openSUSE Security Update : ffmpeg (openSUSE-2016-246)

This update to ffmpeg 2.8.6 fixes the following issues : - CVE-2016-2329: Remote DoS via crafted TIFF files boo966674 VLC was updated to 2.8.6, containing various other upstream bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

FreeBSD : squid -- SSL/TLS processing remote DoS (56562efb-d5e4-11e5-b2bd-002590263bf5)

Squid security advisory 2016:1 reports : Due to incorrectly handling server errors Squid is vulnerable to a denial of service attack when connecting to TLS or SSL servers. This problem allows any trusted client to perform a denial of service attack on the Squid service regardless of whether TLS o...

CVE-2016-2329

CVE-2016-2329 affects FFmpeg before 2.8.6, specifically the libavcodec/tiff.c flow. The vulnerability arises from improper validation of RowsPerStrip values and YCbCr chrominance subsampling factors in TIFF decoding, enabling a remote attacker to cause a denial of service via out-of-bounds array ...

Android Memory Corruption Vulnerability (CNVD-2016-01096)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. mediaserver is one of the multimedia service components. A security vulnerability exists in the libstagefright library in Android's mediaserver. The vulnerability can be exploited ...

php: Security update (7 CVEs)

The php package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues. VERSION 5.6.8-1 = 5.6.17-1 CHANGELOG Sun, 24 Jan 2016 21:47:52 +0100 18d121b Update to 5.6.17 Fixes CVE-2016-1903. Wed, 23 Dec 2015 16:00:14 -0500 766cfcc Update to 5.6.16 Wed, ...

ISC BIND DNS RDATA Handling Remote DoS Vulnerability (Jan 2016)

ISC BIND is prone to a remote denial of service DoS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2015-8705

buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit, or daemon crash or possibly have unspecified other impact via 1 OPT data or 2 an ECS option...