135 matches found
[SECURITY] [DSA 3400-1] lxc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3400-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 19, 2015 https://www.debian.org/security/faq -...
SUSE SLED11 / SLES11 Security Update : lxc (SUSE-SU-2015:1829-1)
lxc was update to fix one security issue. The following vulnerability was fixed : - CVE-2015-1335: A directory traversal flaw while lxc-start is initially setting up the mounts for a container bsc946744 Note that Tenable Network Security has extracted the preceding description block directly from...
Oracle: Security Advisory (ELSA-2015-3087)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
lxc security update
1.0.7-2.0.12 - Orabug 22011867 ol6 ct shutdown script remounts /dev/pts/ devices as ro on host system. 1.0.7-2.0.11 - Orabug 21842483 failed to create directory '/RUN/LXC/LOCK//CONTAINER/OL7.1/SNAPS' - CVE-2015-1335: Protect container mounts against symlinks. - Fixed build failure on OL6...
openSUSE Security Update : lxc (openSUSE-2015-648)
lxc was update to fix one security issue. The following vulnerability was fixed : - CVE-2015-1335: A directory traversal flaw while lxc-start is initially setting up the mounts for a container boo946744 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
Oracle: Security Advisory (ELSA-2009-1335)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2015:1829-1 Security update for lxc
lxc was update to fix one security issue. The following vulnerability was fixed: CVE-2015-1335: A directory traversal flaw while lxc-start is initially setting up the mounts for a container bsc946744...
CVE-2015-1335
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a 1 mount target or 2 bind mount source...
CVE-2015-1335
CVE-2015-1335 affects LXC (lxc-start) before 1.0.8 and 1.1.x before 1.1.4, enabling a local container administrator to escape AppArmor confinement via a symlink attack on a mount target or bind mount source. The connected documents corroborate a container breakout/unsafe mounting scenario and sho...
CVE-2015-1335
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a 1 mount target or 2 bind mount source...
UBUNTU-CVE-2015-1335
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a 1 mount target or 2 bind mount source...
IBM Tivoli Storage Manager FastBack Server Opcode 1335 Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1335. By sending a crafted packet on TCP...
Apple TV < 6.1.2 Multiple Vulnerabilities
Binary data 8323.prm...
May 2014 Apple Safari Browser Security Patches
Apple released an update to Safari yesterday patching 22 vulnerabilities in the WebKit browser engine that allow code execution or a browser crash. Safari 7.0.4 is available for OS X Mavericks 10.9 and Safari 6.1.4 for OS X Mountain Lion 10.8. The vulnerabilities could be exploited if the user wa...
Safari < 6.1.4 / 7.0.4 Multiple Vulnerabilities
Binary data 8264.prm...
CVE-2014-1335
WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1...
CVE-2014-1335
CVE-2014-1335 affects WebKit as used by Apple Safari, before 6.1.4 and 7.x before 7.0.4. A crafted website can lead to remote arbitrary code execution or a denial of service via memory corruption, causing application crash. The description and references in the provided documents confirm the vuln...
Microsoft Office Wordview Remote Code Execution Vulnerability (2830399)
This host is missing an important security update according to Microsoft Bulletin MS13-043. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
RHEL 5 : openssl (RHSA-2009:1335)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1335 advisory. - openssl: mimehdrcmp NULL dereference crash CVE-2006-7250 - openssl: ASN1 printing crash CVE-2009-0590 - OpenSSL: DTLS epoch record buffer...
