Download
| Alert*
oval:org.secpod.oval:def:89050218
This update for freetds to 1.1.36 fixes the following issues: Security issue fixed: - CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 . Non-security issues fixed: - Enabled Kerberos support - Version update to 1.1.36: ... oval:org.secpod.oval:def:89050387 This update for freetds to 1.1.36 fixes the following issues: Security issue fixed: - CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 . Non-security issues fixed: - Enabled Kerberos support - Version update to 1.1.36: ... oval:org.secpod.oval:def:59776 FreeTDS prior to 1.1.11 has a Buffer Overflow.marked the task 3.10-stable as completedmarked the task 3.9-stable as completedmarked the task 3.8-stable as completed oval:org.secpod.oval:def:59611 freetds: libraries for connecting to MS SQL and Sybase SQL servers FreeTDS could be made to crash or run programs if it received specially crafted network traffic. oval:org.secpod.oval:def:705260 freetds: libraries for connecting to MS SQL and Sybase SQL servers FreeTDS could be made to crash or run programs if it received specially crafted network traffic. |