UBUNTU-CVE-2016-10119

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...

Code injection

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...

UBUNTU-CVE-2016-10120

Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...

CVE-2016-10119

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...

CVE-2016-10120

Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...

CVE-2016-10119

Firejail is affected by CVE-2016-10119: the vulnerability arises from Firejail mounting /tmp with 0777 permissions, enabling local privilege escalation. Affected component: Firejail; root cause: incorrect permissions on /tmp during mount. Impact: local users could gain privileges (as described). ...

Juniper Networks Junos OS OpenSSH Information Leak and Buffer Overflow Vulnerability

Junos OS is prone to an information leak and buffer overflow vulnerability in the OpenSSH client. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Memory corruption

Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777...

CVE-2015-8553

Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777...

CVE-2015-8553

CVE-2015-8553 is referenced in multiple connected Nessus entries as a Xen/Linux kernel memory-information disclosure vulnerability. The description stored with the CVE notes that guest OS users can obtain sensitive information from uninitialized host kernel memory because memory and I/O decoding ...

Fedora 22 : openssh-6.9p1-10.fc22 (2016-c330264861)

Security fix for CVE-2016-0777 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 23 : openssh-7.1p2-1.fc23 (2016-67c6ef0d4f)

Security fix for CVE-2016-0777 ---- This update provides several fixes for legacy ssh-copy-id, rpm macros and sshd-keygen Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora Update for gsi-openssh FEDORA-2016-2

Check the version of gsi-openssh SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.807220";...

Fedora Update for gsi-openssh FEDORA-2016-4556904561

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for openssh (openSUSE-SU-2016:0128-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Fri Jan 29 16:13:16 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory7.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory7.asc...

Fedora 23 : gsi-openssh-7.1p2-1.fc23 (2016-4556904561)

Sync with latest openssh package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

SOL01131113 - OpenSSH vulnerabilities CVE-2016-0777 and CVE-2016-0778

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

openSUSE Security Update : openssh (openSUSE-2016-49)

CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the...

openSUSE Security Update : openssh (openSUSE-2016-39)

This update for openssh fixes the following issues : - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could trigger a...