Информационная безопасность
[RU] switch to English


Многочисленные уязвимости безопасности в QEMU / Xen
Опубликовано:1 февраля 2014 г.
Источник:
SecurityVulns ID:13545
Тип:удаленная
Уровень опасности:
5/10
Описание:Повышение привилегий, DoS.
Затронутые продукты:QEMU : qemu 1.6
 XEN : XEN 4.3
CVE:CVE-2013-4377 (Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.)
 CVE-2013-4375 (The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant reference consumption) via unspecified vectors.)
 CVE-2013-4344 (Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.)
Оригинальный текстdocumentUBUNTU, [USN-2092-1] QEMU vulnerabilities (01.02.2014)

Атаки на понижение версии протокола в libotr
Опубликовано:1 февраля 2014 г.
Источник:
SecurityVulns ID:13546
Тип:m-i-t-m
Уровень опасности:
5/10
Описание:Возможны атаки на понижение протокола до 1й версии.
Затронутые продукты:LIBOTR : libotr 3.2
Оригинальный текстdocumentUBUNTU, [USN-2091-1] OTR vulnerabilities (01.02.2014)

Выполнение кода в Mozilla Thunderbird
Опубликовано:1 февраля 2014 г.
Источник:
SecurityVulns ID:13547
Тип:клиент
Уровень опасности:
6/10
Описание:Возможно выполнить javascript через object
Оригинальный текстdocumentVulnerability Lab, Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability (01.02.2014)

Уязвимости безопасности в cURL
дополнено с 1 февраля 2014 г.
Опубликовано:1 ноября 2015 г.
Источник:
SecurityVulns ID:13544
Тип:клиент
Уровень опасности:
7/10
Описание:При использовании NTLM-ауфентикации запрос может быть отправлен через неверное соединение. Утечки информации, DoS.
Затронутые продукты:CURL : libcurl 7.41
 CURL : cURL 7.35
CVE:CVE-2015-3237 (The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.)
 CVE-2015-3236 (cURL and libcurl 7.40.0 through 7.42.1 sends the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.)
 CVE-2015-3153 (The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.)
 CVE-2015-3148 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.)
 CVE-2015-3145 (The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.)
 CVE-2015-3144 (The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80.")
 CVE-2015-3143 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.)
 CVE-2014-0015 (cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.)
Оригинальный текстdocumentUBUNTU, [USN-2591-1] curl vulnerabilities (05.05.2015)
 documentMANDRIVA, [ MDVSA-2015:220 ] curl (04.05.2015)
 documentDEBIAN, [SECURITY] [DSA 2849-1] curl security update (01.02.2014)

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород