Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 8 : kernel (RHSA-2020:3010)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3010 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-935)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-19462: relayopen in kernel/relay.c allowed local users to cause a denial of service such as relay blockage by triggering a NULL allocpercpu result bnc1158265. -...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1713-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-10768: Fixed an issue with the prctl function which could have allowed indirect branch speculation even after it has been disabled bsc1172783...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1699-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-10768: The prctl function could be used to enable indirect branch speculation even after it has been disabled. bnc1172783 CVE-2020-10766: A bug in...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1693-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-10768: The prctl function could be used to enable indirect branch speculation even after it has been disabled. bnc1172783 CVE-2020-10766: A bug in the...

Photon OS 3.0: Linux PHSA-2020-3.0-0108

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0108. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138181;...

SUSE-SU-2020:1699-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10768: The prctl function could be used to enable indirect branch speculation even after it has been disabled. bnc1172783 - CVE-2020-10766: A bug ...

Fedora 32 : kernel (2020-125ccdc871)

The 5.6.19 stable kernel updates contain a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2020-10766

A logic bug flaw was found in the Linux kernel’s implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per...

CVE-2019-10766

Summary (CVE-2019-10766) : Pixie, a PHP-oriented database query generator, has a vulnerability in the limit() function due to improper sanitization . Versions affected are Pixie 1.0.x before 1.0.3 and Pixie 2.0.x before 2.0.2 . The provided documents describe this as a SQL injection risk but do n...

CVE-2016-10766

creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:12+00:00| seen| https://t.me/cibsecurity/5774 2019-08-05 18:34:07+00:00| seen| https://t.me/cibsecurity/5926...

CVE-2016-10766

edx-platform before 2016-06-06 allows CSRF...

CVE-2016-10766

edx-platform before 2016-06-06 allows CSRF...

CVE-2016-10766

CVE-2016-10766 affects edx-platform prior to 2016-06-06 and is a cross-site request forgery (CSRF) vulnerability. According to the sources, the issue is a CSRF flaw in edx-platform before the specified date. CVSSv3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, no p...

CVE-2017-10766

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!ScriptStringAnalyse+0x00000000000001c8."...

CVE-2017-10766

XnView Classic for Windows Version 2.40 is vulnerable to a crafted .rle file leading to a denial of service (and potentially other impact). The issue is triggered by data flow from a faulting address that controls branch selection in GDI32!ScriptStringAnalyse+0x1c8. Impact is described as DoS wit...