Circle with Disney Apid Strstr Authentication Bypass Vulnerability(CVE-2017-2914)

Summary An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass the authentication routine of the Apid binary, causing the device to grant unintended administrative access. An attacker needs...

Oracle: Security Advisory (ELSA-2016-0176)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : glibc (ELSA-2015-2172)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2172 advisory. 2.17-106.0.1.1 - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and...

Fedora 13 : glibc-2.12.1-3 (2010-16594)

Fix strstr and memmem algorithm BZ12092, 641124 - Fix handling of tail bytes of buffer in SSE2/SSSE3 x86-64 version strncmp BZ12077 - Never expand $ORIGIN in privileged programs 643306, CVE-2010-3847 Note that Tenable Network Security has extracted the preceding description block directly from...