8 matches found
php -- use-after-free vulnerability
Symeon Paraschoudis reports: Use-after-free vulnerability in splrecursiveitmoveforwardex...
php -- use-after-free vulnerability
Symeon Paraschoudis reports: Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk...
Debian DLA-84-1 : curl security update
Symeon Paraschoudis discovered that the curleasyduphandle function in cURL, an URL transfer library, has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a HTTP POST operation. This bug requires CURLOPTCOPYPOSTFIELDS and...
Mandriva Linux Security Advisory : curl (MDVSA-2014:213)
Updated curl packages fix security vulnerability : Symeon Paraschoudis discovered that the curleasyduphandle function in cURL has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a HTTP POST operation. This bug requires...
Updated curl packages fix CVE-2014-3707
Updated curl packages fix security vulnerability: Symeon Paraschoudis discovered that the curleasyduphandle function in cURL has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a HTTP POST operation. This bug requires...
curl: out-of-bounds read
Symeon Paraschoudis discovered that the curleasyduphandle function has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending...
Ubuntu 14.04 LTS : curl vulnerability (USN-2399-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2399-1 advisory. Symeon Paraschoudis discovered that curl incorrectly handled memory when being used with CURLOPTCOPYPOSTFIELDS and curleasyduphandle. This may result in sensitive...
