177 matches found
Security Bulletin: IBM PureApplication Service is affected by a GPFS vulnerability (CVE-2018-1783)
Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication Service. IBM has released Version 2.2.5.3 for IBM PureApplication Service, in response to CVE-2018-1783. IBM PureApplication Service provides a GPFS pattern and addressed the applicable CVE. Vulnerability...
Security Bulletin: IBM PureApplication System is affected by a GPFS vulnerability (CVE-2018-1783)
Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication System. IBM has released Version 2.2.5.3 for IBM PureApplication System, in response to CVE-2018-1783. IBM PureApplication System provides a GPFS pattern and addressed the applicable CVE. Vulnerability...
CVE-2018-1783
IBM GPFS IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 and 5.0.1.2 command line utility allows an unprivileged, authenticated user with access to a GPFS node to forcefully terminate GPFS and deny access to data available through GPFS. IBM X-Force ID: 148806...
CVE-2018-1783
CVE-2018-1783 affects IBM GPFS/IBM Spectrum Scale components. The IBM bulletins describe that the GPFS command line utility lets an unprivileged, authenticated user with GPFS node access forcibly terminate GPFS and deny data access. Affected products include IBM Spectrum Scale and Db2/PureApplica...
CVE-2017-1783
IBM Cognos Analytics 11.0.x is affected by CVE-2017-1783: a local user could modify parameters via the Cognos Analytics menus without authentication. The advisory (IBM D6B9…) assigns CVSS v3.0 vector CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N with base score 4.0. Affected versions are 11.0.0.0 ...
CVE-2015-1783
The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...
CVE-2015-1783
The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...
UBUNTU-CVE-2015-1783
The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...
CVE-2015-1783
The CVE-2015-1783 entry concerns the Lasso library. The root cause is a flaw in the get_or_define_ns function where the prefix variable can lead to uninitialized memory access, enabling a remote attacker to trigger a denial of service via unspecified vectors, resulting in an application crash. Th...
CVE-2015-1783
The prefix variable in the getordefinens function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service uninitialized memory access and application crash via unspecified vectors...
CVE-2016-1783
CVE-2016-1783 affects WebKit in Apple iOS (pre-9.3), Safari (pre-9.1), and tvOS (pre-9.2). Description: remote attacker can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. Root cause: memory corruption in WebKit components expo...
About the security content of Safari 9.1
About the security content of Safari 9.1 This document describes the security content of Safari 9.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...
Oracle: Security Advisory (ELSA-2011-0862)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201309-11
Gentoo Linux Local Security Checks GLSA 201309-11 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Fedora 22 : lasso-2.4.1-3.fc22 (2015-4821)
Security fix for CVE-2015-1783 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 20 : lasso-2.4.1-1.fc20 (2015-4848)
Security fix for CVE-2015-1783 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2011:0695-1)
Subversion was updated to version 1.6.17 to fix several security issues : - CVE-2011-1752: The moddavsvn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. - CVE-2011-1783: The moddavsvn Apache HTTPD server module can trigger a loop which consumes a...
openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2011:0693-1)
CVE-2011-1752: The moddavsvn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. - CVE-2011-1783: The moddavsvn Apache HTTPD server module can trigger a loop which consumes all available memory on the system. - CVE-2011-1921: The moddavsvn Apache...
Memory corruption
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784,...
Memory corruption
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784,...