Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Privoxy < 3.0.23 Multiple DoS Vulnerabilities

According to its self-reported version number, the version of Privoxy running on the remote host is prior to 3.0.23. It is, therefore, potentially affected by multiple denial of service vulnerabilities : - A flaw exists in the chunkedbodyiscomplete function in 'jcc.c' due to improper processing o...

Crash using DrawTarget in Cairo graphics library — Mozilla

Security researcher Atte Kettunen used the Address Sanitizer tool to discover a crash while drawing images through the Cairo graphics library while using the DrawTarget function. This can result in a segmentation fault due to zero-ing out of memory outside the bounds of the image...

Code injection

FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...

CVE-2012-6687

FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...

CVE-2012-6687

FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...

CVE-2012-6687

CVE-2012-6687 affects FastCGI (fcgi/libfcgi) 2.4.0, where remote attackers can cause a denial of service (segmentation fault/crash) by opening a large number of connections. The underlying cause is discussed in Mageia MGASA-2016-0089: fcgi does not perform range checks for file descriptors before...

CVE-2012-6687

FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...

PT-2015-3536

Name of the Vulnerable Software and Affected Versions FastCGI versions 2.4.0 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault and crash, by establishing a large number of connections. Recommendations For FastCGI version 2.4.0, consider...

CVE-2012-6687: Improper Input Validation

FastCGI aka fcgi and libfcgi 2.4.0 allows remote attackers to cause a denial of service segmentation fault and crash via a large number of connections...

openSUSE Security Update : tcpdump (openSUSE-2015-146)

tcpdump was updated to fix three security issues. These security issues were fixed : - CVE-2014-8767: Integer underflow in the olsrprint function in tcpdump 3.9.6 through 4.6.2, when in verbose mode, allowed remote attackers to cause a denial of service crash via a crafted length value in an OLSR...

CVE-2015-1381

Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service segmentation fault or memory consumption via unspecified vectors...

CVE-2015-1381

Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service segmentation fault or memory consumption via unspecified vectors...

CVE-2015-1381: Undefined Security Weakness

Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service segmentation fault or memory consumption via unspecified vectors...

Wary of the Ghost vulnerability in the butterfly effect granted Server Permissions-bug warning-the black bar safety net

Recently everyone is concerned about the Ghost vulnerability, CNNVD-2 0 1 5 0 1-6 5 8, In addition to in clockdiff, and procmail, and exim and other applications on the discovered vulnerabilities, yesterday security personnel found to have spread to the common on the web application, such as the...

Internet Bug Bounty: Segmentation fault for invalid PSS parameters

The signature verification routines will crash with a NULL pointer dereference if presented with an ASN.1 signature using the RSA PSS algorithm and invalid parameters. Since these routines are used to verify certificate signature algorithms this can be used to crash any certificate verification...

PT-2015-5254

Name of the Vulnerable Software and Affected Versions Privoxy versions prior to 3.0.23 Description The issue involves multiple unspecified vulnerabilities in the pcrs.c component of Privoxy. These vulnerabilities allow remote attackers to cause a denial of service, which can result in a...

SUSE-SU-2015:0367-1 Security update for vorbis-tools

This update fixes the following security issue: - A crafted raw file used as input could cause a segmentation fault CVE-2014-9640, bsc914938...

PT-2015-7882

Name of the Vulnerable Software and Affected Versions Privoxy affected versions not specified Description The issue concerns several security problems. One problem is a DoS issue that occurs when Privoxy receives client requests with incorrect chunk-encoded bodies, which could cause Privoxy to...

TCPDUMP ISAKMP Payload Handling DoS (CVE-2004-0183)

Tcpdump parses and displays, and optionally records packets received on a network interface matching a user provided filter. Two vulnerabilities exist in the Tcpdump ISAKMP payload handling module, which can be exploited to cause a DoS Denial of Service by sending packets with specially crafted...