Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3797-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3797-1 advisory. Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in the Linux kernel. An attacker could use this to...

EulerOS 2.0 SP1 : libcdio (EulerOS-SA-2018-1081)

According to the versions of the libcdio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM...

EulerOS 2.0 SP2 : libcdio (EulerOS-SA-2018-1082)

According to the versions of the libcdio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM...

[SECURITY] Fedora 26 Update: libcdio-0.94-5.fc26

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

Solaris 10 (x86) : 124629-12

SunOS 5.10x86: CD-ROM Install Boot Image. Date this patch was last updated by Sun : Jul/28/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

[SECURITY] Fedora 27 Update: libcdio-0.94-5.fc27

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

QEMU IDE disk and CD/DVD-ROM virtual machine implementation denial of service vulnerability

QEMU is a suite of analog processor software. A security vulnerability in the QEMU IDE disk and CD/DVD-ROM virtual machine implementation support allows local attackers to exploit the vulnerability by submitting a special request that crashes the application...

Debian Security Advisory DSA 3823-1 (eject - security update)

Ilja Van Sprundel discovered that the dmcrypt-get-device helper used to check if a given device is an encrypted device handled by devmapper, and used in eject, does not check return values from setuid and setgid when dropping privileges. OpenVAS Vulnerability Test $Id: deb3823.nasl 6607 2017-07-0...

SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2015:1455-1)

kvm was updated to fix one security issue. This security issue was fixed : - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLES11 Security Update : kvm (SUSE-SU-2015:1426-1)

kvm was updated to fix two security issues. The following vulnerabilities were fixed : - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344. - CVE-2015-3209: Fix buffer overflow in pcnet emulation bsc932770. Note that Tenable Network Security has extracted the preceding...

SUSE SLES11 Security Update : xen (SUSE-SU-2015:1421-1)

Xen was updated to fix the following security issues : - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344 - CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model XSA-140, bsc939712 Note that Tenable Network Security has extracted the preceding...

SUSE SLES11 Security Update : xen (SUSE-SU-2015:1408-1)

This security update of Xen fixes the following issues : - bsc939712 XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model CVE-2015-5165 - bsc938344: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154 Note that Tenable Network Security has extracted the...

SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2015:1299-1)

xen was updated to fix two security issues. These security issues were fixed : - CVE-2015-3259: xl command line config handling stack overflow bsc935634, XSA-137. - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344. The update package also includes non-security fixes. See...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1302-1)

xen was updated to fix two security issues. These security issues were fixed : - CVE-2015-3259: xl command line config handling stack overflow bsc935634, XSA-137. - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344. The update package also includes non-security fixes. See...

IT-Grundschutz M4.057: Deaktivieren der automatischen CD-ROM Erkennung

IT-Grundschutz M4.057: Deaktivieren der automatischen CD-ROM Erkennung Stand: 14. Ergaenzungslieferung 14. EL. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

IT-Grundschutz M4.057: Deaktivieren der automatischen CD-ROM Erkennung

IT-Grundschutz M4.057: Deaktivieren der automatischen CD-ROM Erkennung Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4057.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.057 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networ...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2375-1)

Ben Hawkes reported some off by one errors for report descriptors in the Linux kernel's HID stack. A physically proximate attacker could exploit these flaws to cause a denial of service out-of-bounds write via a specially crafted device. CVE-2014-3184 Several bounds check flaws allowing for buffe...

CVE-2011-3346

Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service guest crash via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has...

Buffer overflow

Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service guest crash via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has...

IT-Grundschutz M4.057: Deaktivieren der automatischen CD-ROM Erkennung - Windows

IT-Grundschutz M4.057: Deaktivieren der automatischen CD-ROM Erkennung Windows ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94207 Stand: 13. Ergänzungslieferung 13...