85 matches found
CVE-2017-14882
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function limprocessactionvendorspecific, a comparison is performed with the incoming action frame body without validating if the...
Security update for hostapd (important)
This update for hostapd fixes the following issues: - Fix KRACK attacks on the AP side boo1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088: Hostap was updated to upstream release 2.6 fixed EAP-pwd last fragment validation...
REXT - Router Exploitation Toolkit
Small toolkit for easy creation and usage of various python scripts that work with embedded devices. core - contains most of toolkits basic functions databases - contains databases, like default credentials etc. interface - contains code that is being used for the creation and manipulation with...
CentOS Update for qemu-guest-agent CESA-2014:1075 centos6
Check the version of qemu-guest-agent SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.881989";...
RHEL 6 : qemu-kvm (RHSA-2014:1075)
Updated qemu-kvm packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
Oracle Linux 6 : qemu-kvm (ELSA-2014-1075)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1075 advisory. - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.txt bz1097225 - kvm-qcow1-Validate-image-size-CVE-2014-0223.txt bz1097234 - Resolves: bz1097225...
Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20140819)
Two integer overflow flaws were found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use either of these flaws to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on...
Moderate: Red Hat Security Advisory: qemu-kvm security and bug fix update
Updated qemu-kvm packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
SQL Servers Oracle Vendor-specific SQL Injection
SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or execute arbitrary code on affected servers...
CVE-2013-2220
Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...
DEBIAN-CVE-2013-2220
Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...
Buffer overflow
Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...
UBUNTU-CVE-2013-2220
Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...
CVE-2013-2220
Removed by vendor...
Debian DSA-2726-1 : php-radius - buffer overflow
A buffer overflow has been discovered in the Radius extension for PHP. The function handling Vendor Specific Attributes assumed that the attributes given would always be of valid length. An attacker could use this assumption to trigger a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network...
Intel Centrino ipw2200BG Wireless Driver Remote BOF Exploit (meta)
Exploit for unknown platform in category remote exploits ================================================================== Intel Centrino ipw2200BG Wireless Driver Remote BOF Exploit meta ================================================================== This file is part of the Metasploit...
Intel Centrino ipw2200BG - Wireless Driver Remote Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...
KisMac MacOS sniffer buffer overflow
Buffer overflow on parsing SSID paramtere of Cisco vendor-specific tags...
Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow
source: https://www.securityfocus.com/bid/12919/info Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'envoptadd' function in the 'telnet.c' source file, which is apparently common source for all...