Ubuntu: Security Advisory (USN-2929-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2930-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 3503-1 (linux - security update)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, information leak or data loss. CVE-2013-4312 Tetsuo Handa discovered that users can use pipes queued on local Unix sockets to allocate an unfair share of kernel memory,...

Fedora 23 : kernel-4.3.4-300.fc23 (2016-2f25d12c51)

Update to latest upstream stable release, Linux v4.3.4. Fixes for Elan touchpads. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 22 : kernel-4.3.4-200.fc22 (2016-5d43766e33)

Update to latest upstream stable release, Linux v4.3.4. Elan touchpad fixes. ---- Update to 4.3.y stable series. Fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

[SECURITY] [DSA 3503-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3503-1 [email protected] https://www.debian.org/security/ Ben Hutchings March 03, 2016 https://www.debian.org/security/faq -...

openSUSE: Security Advisory for kernel (openSUSE-SU-2016:0537-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-256)

The openSUSE 13.2 kernel was updated to receive security and bugfixes. It also fixes a regression that caused the Chromium sandbox to no longer work bsc965356. Following security bugs were fixed : - CVE-2016-2069: A flaw was discovered in a way the Linux deals with paging structures. When Linux...

Security update for the Linux Kernel (important)

The openSUSE 13.2 kernel was updated to receive security and bugfixes. It also fixes a regression that caused the Chromium sandbox to no longer work bsc965356. Following security bugs were fixed: - CVE-2016-2069: A flaw was discovered in a way the Linux deals with paging structures. When Linux...

Amazon Linux: Security Advisory (ALAS-2016-648)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-0723

CVE-2016-0723 is a Linux kernel race condition in the tty_ioctl handler (drivers/tty/tty_io.c) that can allow a local attacker to obtain memory content or trigger a denial of service by manipulating a TIOCGETD call during a TIOCSETD operation. The initial description states the flaw exists in ker...

CVE-2016-0723

Race condition in the ttyioctl function in drivers/tty/ttyio.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service use-after-free and system crash by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl...

CVE-2016-0723

Race condition in the ttyioctl function in drivers/tty/ttyio.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service use-after-free and system crash by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl...

[SECURITY] [DLA 412-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze19 CVE ID : CVE-2015-7566 CVE-2015-8767 CVE-2015-8785 CVE-2016-0723 CVE-2016-2069 This update fixes the CVEs described below. CVE-2015-7566 Ralf Spenneberg of OpenSource Security reported that the visor...

Debian DSA-3448-1 : linux - security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation or denial-of-service. - CVE-2013-4312 Tetsuo Handa discovered that it is possible for a process to open far more files than the process' limit leading to denial-of-service conditions. -...

[SECURITY] [DSA 3448-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3448-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3448-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3448-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 19, 2016 https://www.debian.org/security/faq -...

CVE-2015-0723

The wireless web-authentication subsystem on Cisco Wireless LAN Controller WLC devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service process crash and device restart via a crafted value, aka Bug ID CSCum03269...

CVE-2015-0723

Cisco Wireless LAN Controller (WLC) firmware 7.5.x and 7.6.x before 7.6.120 is affected by a denial-of-service in the web authentication subsystem. The vulnerability stems from improper validation of user-supplied input, enabling an unauthenticated, adjacent attacker to craft a request that cause...

CVE-2014-0723

Cisco IP Manager Assistant (IPMA) within Cisco Unified Communications Manager (UCM) suffers a cross-site scripting (XSS) vulnerability. The issue stems from insufficient input validation in the IPMA web interface, allowing an unauthenticated, remote attacker to craft a URL that injects arbitrary ...