SUSE: Security Advisory (SUSE-SU-2018:1762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Information Disclosure(CVE-2019-1094)

An information disclosure vulnerability exists in microsoft windows . Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

CVE-2020-1094

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'...

CVE-2020-1094

CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...

CVE-2012-1094

JBoss AS 7 prior to 7.1.1 and modcluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed...

CVE-2012-1094

Summary: CVE-2012-1094 affects Red Hat/JBoss AS 7 before 7.1.1 with mod_cluster. The issue arises from how a default hostname is handled, causing the excluded-contexts list to be mismatched and the root context to be exposed. Affected software: JBoss Application Server 7.x up to 7.1.0 (and mod_cl...

CVE-2012-1094

JBoss AS 7 prior to 7.1.1 and modcluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1131)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1076)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1472)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-1094

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-111...

CVE-2019-1094

Technical details (affected products/versions/root cause/fix) for CVE-2019-1094 are not provided in the connected documents. Monitor Microsoft advisories and MSRC for updates.

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1507)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The Linux kernel has an undefined behavior when an argument of INTMIN is passed to the kernel/signal.c:killsomethinginfo function...

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1236)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Linux kernel is vulnerable to a NULL pointer dereference in the ext4/xattr.c:ext4xattrinodehash function. An attacker could tric...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1076)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A security flaw was found in the ipfragreasm function in net/ipv4/ipfragment.c in the Linux kernel which can cause a later system crash in...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4532)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4532 advisory. - ext4: validate that metadata blocks do not overlap superblock Theodore Ts'o Orabug: 28220451 CVE-2018-1094 - ext4: always initialize the crc32c...

Unbreakable Enterprise kernel security update

4.1.12-124.24.3 - ext4: update idisksize when new eof exceeds it Shan Hai Orabug: 28940828 - ext4: update idisksize if direct write past ondisk size Eryu Guan Orabug: 28940828 - ext4: protect idisksize update by idatasem in direct write path Eryu Guan Orabug: 28940828 - ALSA: usb-audio: Fix UAF...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1855-2)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed : CVE-2018-5848: In the function wmisetie, the length validation code did not handle unsigned integer overflow properly. As a result, a large value of the 'ielen'...

Photon OS 1.0: Linux / Rsync PHSA-2018-1.0-0132 (deprecated)

An update of 'linux-esx', 'rsync', 'linux' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0132. The text itself is copyrig...

openSUSE Security Update : the Linux Kernel (openSUSE-2018-762) (Spectre)

The openSUSE Leap 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges...