Updated squid packages fix security vulnerabilities

Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors CVE-2018-19131. Due to a memory leak in SNMP query rejection code, Squid is vulnerable to a denial of service attack CVE-2018-19132...

SUSE-SU-2018:3786-1 Security update for squid

This update for squid fixes the following issues: Security issues fixed: - CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. - CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: - Create runtime...

SUSE SLES12 Security Update : squid (SUSE-SU-2018:3771-1)

This update for squid fixes the following issues : Security issues fixed : CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: Create runtime...

SUSE-SU-2018:3771-1 Security update for squid

This update for squid fixes the following issues: Security issues fixed: - CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling bsc1113668. - CVE-2018-19132: Fixed small memory leak in processing of SNMP packets bsc1113669. Non-security issues fixed: - Create runtime...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

Sql injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

CVE-2018-19281

CVE-2018-19281 affects Centreon 3.4.x and is resolved in Centreon 18.10.0 and Centreon Web 2.8.27. The vulnerability is described as a SQL injection via SNMP trap, indicating that untrusted data from SNMP traps could be used to manipulate the backend database. Publicly provided connected document...

CVE-2018-19281

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

Siemens SIMATIC HMI Device Detection (SNMP)

SNMP based detection of Siemens SIMATIC HMI devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

Memory corruption

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

CVE-2018-19132

CVE-2018-19132 : In Squid, a memory leak occurs when SNMP is enabled, exploitable via SNMP packets to cause denial of service by resource exhaustion. Public advisories confirm a fix in newer Squid releases across multiple distros (e.g., Debian squid3 updates, Mageia 2018-0458, Amazon ALAS/SR pack...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

CVE-2018-19132

Squid before 4.4, when SNMP is enabled, allows a denial of service Memory Leak via an SNMP packet...

389-ds-base security, bug fix, and enhancement update

1.3.8.4-15 - Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch 1.3.8.4-14 - Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack 1.3.8.4-13 - Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in deletepasswdPolicy when...

openSUSE Security Update : net-snmp (openSUSE-2018-1313)

This update for net-snmp fixes the following issues : Security issues fixed : - CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in...

Security update for net-snmp (important)

This update for net-snmp fixes the following issues: Security issues fixed: - CVE-2018-18065: setkey in agent/helpers/tablecontainer.c had a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Deni...

openSUSE: Security Advisory for net-snmp (openSUSE-SU-2018:3508-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...