Computer Security
[EN] securityvulns.ru no-pyccku


QEMU / Xen multiple security vulnerabilities
Published:01.02.2014
Source:
SecurityVulns ID:13545
Type:remote
Threat Level:
5/10
Description:DoS, privilege escalation.
Affected:QEMU : qemu 1.6
 XEN : XEN 4.3
CVE:CVE-2013-4377 (Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.)
 CVE-2013-4375 (The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant reference consumption) via unspecified vectors.)
 CVE-2013-4344 (Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.)
Original documentdocumentUBUNTU, [USN-2092-1] QEMU vulnerabilities (01.02.2014)

libotr downgrade attacks
Published:01.02.2014
Source:
SecurityVulns ID:13546
Type:m-i-t-m
Threat Level:
5/10
Description:It's possible to downgrade protocol to 1st version.
Affected:LIBOTR : libotr 3.2
Original documentdocumentUBUNTU, [USN-2091-1] OTR vulnerabilities (01.02.2014)

Mozilla Thunderbird code execution
Published:01.02.2014
Source:
SecurityVulns ID:13547
Type:client
Threat Level:
6/10
Description:It's possible to execute javascript via object tag.
Original documentdocumentVulnerability Lab, Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability (01.02.2014)

cURL security vulnerabilitiies
updated since 01.02.2014
Published:01.11.2015
Source:
SecurityVulns ID:13544
Type:client
Threat Level:
7/10
Description:Request may be sent via wrong connection if NTLM authentication is used. Information disclosure, DoS.
Affected:CURL : libcurl 7.41
 CURL : cURL 7.35
CVE:CVE-2015-3237 (The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.)
 CVE-2015-3236 (cURL and libcurl 7.40.0 through 7.42.1 sends the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.)
 CVE-2015-3153 (The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.)
 CVE-2015-3148 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.)
 CVE-2015-3145 (The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.)
 CVE-2015-3144 (The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as demonstrated by "http://:80" and ":80.")
 CVE-2015-3143 (cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.)
 CVE-2014-0015 (cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.)
Original documentdocumentUBUNTU, [USN-2591-1] curl vulnerabilities (05.05.2015)
 documentMANDRIVA, [ MDVSA-2015:220 ] curl (04.05.2015)
 documentDEBIAN, [SECURITY] [DSA 2849-1] curl security update (01.02.2014)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod