Author: Fortify Security Team

CVE-2016-9466

Posted by Fortify Security Team | Mar 28, 2017 | CVE Notifications |

Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server....

CVE-2017-7277

Posted by Fortify Security Team | Mar 28, 2017 | CVE Notifications |

The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain sensitive information from the kernel’s internal socket data structures or cause a...

CVE-2016-8884

Posted by Fortify Security Team | Mar 28, 2017 | CVE Notifications |

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this...

CVE-2016-10152

Posted by Fortify Security Team | Mar 28, 2017 | CVE Notifications |

The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the “.athena.mit.edu” default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by...

CVE-2016-8031

Posted by Fortify Security Team | Mar 28, 2017 | CVE Notifications |

Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local security protection via a crafted input file.