sqlite3: Crash in sqlite3DbMallocRawNN

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6739028850245632 Project: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzz target binary: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x630000524f22 Crash State:...

PHP 5.6.29 releases, security vulnerability fixes-bug warning-the black bar safety net

The PHP development team announced PHP 5.6.29 available. This is a safe version that fixes several security vulnerabilities. Suggested that all PHP 5.6 users upgrade to this version. Update content: Mysqlnd: Fixed bug 64526 the missing mysqlnd. Add parameters to the php. ini-. Opcache: Fixed bug...

OS X Gather Messages

This module will collect the Messages sqlite3 database files and chat logs from the victim's machine. There are four actions you may choose: DBFILE, READABLE, LATEST, and ALL. DBFILE and READABLE will retrieve all messages, and LATEST will retrieve the last X number of messages useful with 2FA...

sqlite3: Heap-use-after-free in exprAnalyze

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4603622180519936 Target: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzzer binary: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x619000000e30 Crash State:...

sqlite3: Heap-use-after-free in sqlite3StrAccumAppend

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5770842466156544 Target: sqlite3 Fuzzer: libFuzzersqlite3ossfuzz Fuzzer binary: ossfuzz Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x60c000000813 Crash State:...

SUSE SLES11 Security Update : sqlite3 (SUSE-SU-2016:2021-1)

This update for sqlite3 fixes the following issues: The following security issue was fixed : - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2016:1945-1)

This update for sqlite3 fixes the following issues: The following security issue was fixed : - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

openSUSE Security Update : pdns (openSUSE-2016-1004)

This update for pdns fixes the following issues : - CVE-2016-6172: malicious primary DNS servers can crash secondaries through large transfers boo987872 As mitigation, the xfr-max-received-mbytes config option was added, defaulting to to 100 MB. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE Security Update : sqlite3 (openSUSE-2016-970)

This update for sqlite3 fixes the following issues : The following security issue was fixed : - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394 This update was imported from the SUSE:SLE-12-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SUSE-SU-2016:2021-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: The following security issue was fixed: - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394...

openSUSE Security Update : sqlite3 (openSUSE-2016-931)

This update for sqlite3 fixes the following issues : - CVE-2016-6153: Tempdir Selection Vulnerability could have led to data leakage under very specific, non-default circumstances boo987394 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SUSE-SU-2016:1945-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: The following security issue was fixed: - CVE-2016-6153: Fixed a tempdir selection vulnerability bsc987394...

MGASA-2016-0255 Updated sqlite3 packages fix security vulnerability

It was discovered that sqlite3 would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions. This could result in information leakage as less secure global temporary directories e.g., /var/tmp or /tmp would be...

Updated sqlite3 packages fix security vulnerability

It was discovered that sqlite3 would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions. This could result in information leakage as less secure global temporary directories e.g., /var/tmp or /tmp would be...

[SECURITY] [DLA 543-1] sqlite3 security update

Package : sqlite3 Version : 3.7.13-1+deb7u3 CVE ID : CVE-2016-6153 It was discovered that sqlite3, a C library that implements a SQL database engine, would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions...

Debian DLA-543-1 : sqlite3 security update

It was discovered that sqlite3, a C library that implements a SQL database engine, would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions. This could result in information leakage as less secure global...

DLA-543-1 sqlite3 - security update

Bulletin has no description...

FreeBSD : SQLite3 -- Tempdir Selection Vulnerability (546deeea-3fc6-11e6-a671-60a44ce6887b)

KoreLogic security reports : Affected versions of SQLite reject potential tempdir locations if they are not readable, falling back to '.'. Thus, SQLite will favor e.g. using cwd for tempfiles on such a system, even if cwd is an unsafe location. Notably, SQLite also checks the permissions of '.',...

SQLite3 -- Tempdir Selection Vulnerability

KoreLogic security reports: Affected versions of SQLite reject potential tempdir locations if they are not readable, falling back to '.'. Thus, SQLite will favor e.g. using cwd for tempfiles on such a system, even if cwd is an unsafe location. Notably, SQLite also checks the permissions of '.', b...

Fedora Update for nodejs-sqlite3 FEDORA-2016-6

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...