Security update for bind (important)

bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries boo939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...

SUSE SLES11 Security Update : bind (SUSE-SU-2015:1316-1)

bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packe...

SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1304-1)

bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packe...

CVE-2015-5477

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service REQUIRE assertion failure and daemon exit via TKEY queries...

SUSE-SU-2015:1316-1 Security update for bind

bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...

SUSE-SU-2015:1305-1 Security update for bind

bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries bsc939567 Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet...

PT-2015-6934

Name of the Vulnerable Software and Affected Versions ISC BIND 9.x versions 9.9.7 through 9.9.7-P1 ISC BIND 9.x version 9.10.x through 9.10.2-P2 Description The issue allows remote attackers to cause a denial of service via TKEY queries, resulting in a REQUIRE assertion failure and daemon exit. B...

UBUNTU-CVE-2015-3227

The 1 jdom.rb and 2 rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service SystemStackError via a large XML document depth...

PT-2015-4840

Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite Service Broker aka VDS-SB versions prior to 3.3.1 R7 Cisco Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS versions prior to 4.0.0 R4 Description The issue allows remote attackers t...

CVE-2015-5357: Undefined Security Weakness

The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before 14.1X53-D10 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

PT-2015-6972

Name of the Vulnerable Software and Affected Versions tidy versions prior to 4.9.31 Description The issue allows remote attackers to cause a denial of service crash via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation. This occurs due...

PT-2015-3591

Name of the Vulnerable Software and Affected Versions SQLite version 3.8.2 Description A buffer overflow issue exists in the skip-scan optimization, allowing remote attackers to cause a denial of service by crashing the system via crafted SQL statements. Recommendations For SQLite version 3.8.2,...

PT-2015-1638

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.51.99995.9 Description The issue is related to resource management errors in the system. It may allow a remote attacker to cause a denial of service by sending multiple requests. Recommendations...

CVE-2015-3279: Undefined Security Weakness

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow...

CVE-2015-4240: Undefined Security Weakness

Cisco IP Communicator 8.64 allows remote attackers to cause a denial of service service outage via an unspecified URL in a GET request, aka Bug ID CSCuu37656...

CVE-2015-3204: Improper Input Validation

libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service daemon restart via an IKEv1 packet with 1 unassigned bits set in the IPSEC DOI value or 2 the next payload value set to ISAKMPNEXTSAK...

CVE-2015-1962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948,...

CVE-2015-1954: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948,...

PT-2015-5007

Name of the Vulnerable Software and Affected Versions PACTware version 4.1 SP3 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using a crafted file that triggers an internal error. Recommendations For PACTware...

CVE-2015-4191: Undefined Security Weakness

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...