November 2017 Archives by subject

• Messages sorted by: [ thread ] [ author ] [ date ]
• More info on this list...

Starting: Wed Nov 1 13:23:42 UTC 2017
Ending: Thu Nov 30 16:20:00 UTC 2017
Messages: 81

• [Secure-testing-team] APTO CREDITO   [NO RESPONDER] telefonosalpie
• [Secure-testing-team] Bug#880528: wordpress: Unsafe queries with wpdb->prepare   Craig Small
• [Secure-testing-team] Bug#880530: slurm-llnl: CVE-2017-15566   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880616: radare2: CVE-2017-16359   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880619: radare2: CVE-2017-16358   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880620: radare2: CVE-2017-16357   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880621: liblouis: CVE-2014-8184: stack-based buffer overflow in findTable()   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880691: ruby-yajl: CVE-2017-16516   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880832: qemu: CVE-2017-15289: cirrus: OOB access issue in mode4and5 write functions   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880836: qemu: CVE-2017-15268: I/O: potential memory exhaustion via websock connection to VNC   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880868: wordpress: CVE-2012-6707   Salvatore Bonaccorso
• [Secure-testing-team] Bug#880954: rsync: CVE-2017-16548: receive_xattr heap overread with non null terminated name   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881019: ffmpeg2theora: null pointer dereference while running ffmpeg2theora with "poc" option   Joonun Jang
• [Secure-testing-team] Bug#881097: libnet-ping-external-perl: long-standing command injection via crafted arguments   Simon McVittie
• [Secure-testing-team] Bug#881110: cacti: CVE-2017-16641: arbitrary execution of os commands via path_rrdtool parameter in an action=save request   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881119: gifsicle: double free while running gifsicle   Joonun Jang
• [Secure-testing-team] Bug#881120: gifsicle: use after free while running gifsicle   Joonun Jang
• [Secure-testing-team] Bug#881121: sox: null pointer dereference while running sox   Joonun Jang
• [Secure-testing-team] Bug#881122: ffmpeg2theora: null pointer dereference while running ffmpeg2theora   Joonun Jang
• [Secure-testing-team] Bug#881123: ffmpeg2theora: null pointer dereference while running ffmpeg2theora   Joonun Jang
• [Secure-testing-team] Bug#881130: vorbis-tools: use uninitialized local value as a pointer running oggenc   Joonun Jang
• [Secure-testing-team] Bug#881131: bs1770gain: divide by zero while running bs1770gain   Joonun Jang
• [Secure-testing-team] Bug#881132: bs1770gain: stack buffer overflow while running bs1770gain   Joonun Jang
• [Secure-testing-team] Bug#881133: x264: out of bound read while running x264   Joonun Jang
• [Secure-testing-team] Bug#881138: ffmpeg2theora: use uninitialized stack value as a pointer while running ffmpeg2theora   Joonun Jang
• [Secure-testing-team] Bug#881139: ffmpeg2theora: heap buffer overflow while running ffmpeg2theora   Joonun Jang
• [Secure-testing-team] Bug#881141: gifsicle: out of bound read while running gifsicle   Joonun Jang
• [Secure-testing-team] Bug#881143: fig2dev: out of bound read while running fig2dev with -L tikz   Joonun Jang
• [Secure-testing-team] Bug#881144: fig2dev: out of bound read while running fig2dev with -L pic option   Joonun Jang
• [Secure-testing-team] Bug#881145: sox: null pointer dereference while running play   Joonun Jang
• [Secure-testing-team] Bug#881205: backintime: CVE-2017-16667: shell injection in notify-send   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881256: asterisk: CVE-2017-16672: AST-2017-011: Memory/File Descriptor/RTP leak in pjsip session resource   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881257: asterisk: CVE-2017-16671: AST-2017-010: Buffer overflow in CDR's set user   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881391: graphicsmagick: CVE-2017-16669: Heap buffer over-write in AcquireCacheNexus function in magick/pixel_cache.c   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881392: imagemagick: CVE-2017-16546   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881445: ruby-ox: CVE-2017-15928: Segmentation fault in the parse_obj   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881524: graphicsmagick: CVE-2017-13134   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881538: php7.0: CVE-2017-8923: Overflowing the length of string causes crash   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881757: collectd: snmp plugin: double free or heap corruption   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881767: sensible-utils: Argument injection in sensible-browser   Gabriel Corona
• [Secure-testing-team] Bug#881808: varnish: CVE-2017-8807: Data leak - '-sfile' Stevedore transient objects   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881856: opensaml2: Dynamic MetadataProvider fails to install security filters (CPPOST-105)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#881862: tcpdump: CVE-2017-16808: heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882012: python-pysaml2: CVE-2017-1000246: Reuse of AES initialization vector in AESCipher / UsernamePasswordMako / Server   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882014: ldns: CVE-2017-1000232: Memory corruption in ldns_str2rdf_long_str (double free)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882015: ldns: CVE-2017-1000231: Memory corruption in ldns_rr_new_frm_fp_l (double free)   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882032: optipng: CVE-2017-1000229: Integer Overflow Bug while parsing TIFF input file   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882034: ruby-redis-store: CVE-2017-1000248   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882041: upx-ucl: CVE-2017-16869   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882134: radare2: CVE-2017-16805   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882136: qemu: CVE-2017-16845: ps2: information leakage via post_load routine   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882144: sox: CVE-2017-15642: Use-after-free in lsx_aiffstartread   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882222: Document security problems with system.3 and popen.3 (argument injection)   Bastien ROUCARIES
• [Secure-testing-team] Bug#882258: busybox: CVE-2017-16544: lineedit: do not tab-complete any strings which have control characters   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882314: swauth: Swift object/proxy server writing swauth Auth Token to log file (CVE-2017-16613)   Ondřej Nový
• [Secure-testing-team] Bug#882370: otrs2: CVE-2017-16664: OSA-2017-07: privilege escalation   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882372: ohcount: Command injection through file names   Jonathan Neuschäfer
• [Secure-testing-team] Bug#882463: xrdp: CVE-2017-16927: Buffer-overflow in scp_v0s_accept function in session manager   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882543: tt-rss: CVE-2017-16896: SQL injection in classes/handler/public.php in the forgotpass component via login parameter   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882544: redmine: CVE-2017-15568   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882545: redmine: CVE-2017-15569   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882547: redmine: CVE-2017-15570   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882548: redmine: CVE-2017-15571   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882613: libxml2: CVE-2017-16932: Infinite recursion in parameter entities   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882620: [CVE-2017-16879] ncurses: Stack-based buffer overflow   Sven Joachim
• [Secure-testing-team] Bug#882620: [CVE-2017-16879] ncurses: Stack-based buffer overflow   Salvatore Bonaccorso
• [Secure-testing-team] Bug#882620: [CVE-2017-16879] ncurses: Stack-based buffer overflow   Sven Joachim
• [Secure-testing-team] Bug#882671: exim4: handles BDAT data incorrectly and leads to crash   Salvatore Bonaccorso
• [Secure-testing-team] Bug#883081: CVE-2017-1234   Guido Günther
• [Secure-testing-team] Bug#883082: CVE-2017-1234   Guido Günther
• [Secure-testing-team] Bug#883198: bs1770gain: use after free while running bs1770gain with "poc output" option   Joonun Jang
• [Secure-testing-team] Bug#883200: ffmpeg2theora: null pointer dereference while running ffmpege2theora   Joonun Jang
• [Secure-testing-team] Deptos Renta Temporaria a mts del Hospital Italiano   Cocheras (no responder)
• [Secure-testing-team] Europa a tu alcance Marzo 2018, dejános tu consulta!   Arribamos.com
• [Secure-testing-team] Ingrese al Negocio de las Cocheras con Pool de Renta   Cocheras (no responder)
• [Secure-testing-team] Invitation: Dear Friend, @ Sat Nov 11, 2017 10am - 11am (EST) (secure-testing-team at lists.alioth.debian.org)   kaborzongo9 at gmail.com
• [Secure-testing-team] LANZAMIENTO y OFERTAS RUEDAR ARGENTINA S.R.L   RuedAR
• [Secure-testing-team] Nuevo Polo Industrial Spegazzini   Alberdi Desarrollos
• [Secure-testing-team] Undelivered Mail Returned to Sender   Mail Delivery System
• [Secure-testing-team] You Have A Problem With Your Account (Account Limited) !   Security Team Inc
• [Secure-testing-team] ☼☼Vacaciones en Florianopolis   (noresponder)

Last message date: Thu Nov 30 16:20:00 UTC 2017
Archived on: Thu Nov 30 16:21:21 UTC 2017

• Messages sorted by: [ thread ] [ author ] [ date ]
• More info on this list...