Month: abril 2018

PHP vulnerability CVE-2016-5771. Security Advisory. Security Advisory Description. spl_array.c in the SPL extension in PHP ... More info: https://support.f5.com/csp/article/K30363030

OpenSSH vulnerability CVE-2016-6515. Security Advisory. Security Advisory Description. The auth_password function in ... More info: https://support.f5.com/csp/article/K31510510

Marcin Noga discovered multiple vulnerabilities in readxl, a GNU Rpackage to read Excel files (via the integrated libxls library), whichcould result in the execution of arbitrary code if a malformedspreadsheet is processed. More info: https://www.debian.org/security/2018/dsa-4173

It was discovered that insufficient input sanitising in libevt, a libraryto access the Windows Event Log (EVT) format, could result in denial ofservice if a malformed EVT file is processed. More info: https://www.debian.org/security/2018/dsa-4160

PHP vulnerability CVE-2016-5766. Security Advisory. Security Advisory Description. Integer overflow in the _gd2GetHeader ... More info: https://support.f5.com/csp/article/K43267483

Project: Drupal coreDate: 2018-March-28Security risk: Highly critical 24∕25 AC:None/A:None/CI:All/II:All/E:Exploit/TD:DefaultVulnerability: Remote Code Execution Description: CVE: CVE-2018-7600A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised.The security team has written an FAQ about this More info: https://www.drupal.org/sa-core-2018-002

Multiple vulnerabilities were discovered in the implementation of thePerl programming language. The Common Vulnerabilities and Exposuresproject identifies the following problems: More info: https://www.debian.org/security/2018/dsa-4172

Samba vulnerability CVE-2017-12163. Security Advisory. Security Advisory Description. ** RESERVED ** This candidate ... More info: https://support.f5.com/csp/article/K00183056

OpenSSL vulnerability CVE-2018-0739. Security Advisory. Security Advisory Description. Constructed ASN.1 types with ... More info: https://support.f5.com/csp/article/K08044291

OpenSSL vulnerability CVE-2018-0733. Security Advisory. Security Advisory Description. Because of an implementation ... More info: https://support.f5.com/csp/article/K62695363