USN-1405-1: Linux kernel vulnerabilities

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in the Linux kernel's ext4 file system wh...

USN-1404-1: Linux kernel (OMAP4) vulnerability

Somnath Kotur discovered an error in the Linux kernel's VLAN virtual lan and be2net drivers. An attacker on the local network could exploit this flaw to cause a denial of service. CVE-2011-3347 A flaw was found in the Linux kernel's ext4 file system when mounting a corrupt filesystem. A...

Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1409-1)

Somnath Kotur discovered an error in the Linux kernel's VLAN virtual lan and be2net drivers. An attacker on the local network could exploit this flaw to cause a denial of service. CVE-2011-3347. Note that Tenable Network Security has extracted the preceding description block directly from the...

Moderate: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes two security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

Novell Netware XNFS.NLM Heap Buffer Overflow (CVE-2011-4191)

A heap buffer overflow vulnerability has been reported in Novell Netware...

Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2012:037)

A vulnerability has been found and corrected in cyrus-imapd : The indexgetids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted...

Wireshark Insecure Search Path Script Execution (CVE-2011-3360)

A script execution vulnerability has been reported in Wireshark...

Fedora 16 : jetty-6.1.26-8.fc16 (2012-0730)

Back-port of upstream jetty patches for CVE-2011-4461 - hash table collisions DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

HP Data Protector Multiple Products RequestCopy SQL Injection (CVE-2011-3158)

An SQL injection vulnerability has been reported in multiple HP Data Protector products...

Fedora Update for jetty FEDORA-2012-0730

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pidgin FEDORA-2012-4595

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1401-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell Netware XNFS.NLM xdrDecodeString Heap Buffer Overflow (CVE-2011-4191)

A heap buffer overflow vulnerability has been reported in Novell Netware...

Mandriva Linux Security Advisory : libsoup (MDVSA-2012:036)

A vulnerability has been found and corrected in libsoup : Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows remote attackers to read arbitrary files via a %2e%2e encoded dot dot in a URI CVE-2011-2524. The updated packages have been patched to correct...

Interactive Data eSignal Stack Buffer Overflow (CVE-2011-3494)

A stack buffer overflow vulnerability exists in Interactive Data eSignal. The vulnerability is due to insufficient string length validation when copying input into a fixed size stack buffer in certain file types.A remote attacker may exploit this issue by enticing a target user to open a speciall...

Apache Struts 2 ParametersInterceptor OGNL Command Injection

Added: 03/26/2012 CVE: CVE-2011-3923 BID: 51628 OSVDB: 78109 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. Problem...

Fedora Update for jetty FEDORA-2012-0752

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : jetty-6.1.26-7.fc15 (2012-0752)

Back-port of upstream jetty patches for CVE-2011-4461, hash DOS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Apache Struts 2 ParametersInterceptor OGNL Command Injection

Added: 03/26/2012 CVE: CVE-2011-3923 BID: 51628 OSVDB: 78109 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. Problem...

CVE-2011-3049

Chromium/Chrome CVE-2011-3049 is documented in openSUSE security advisory GLSA 201203-19 and related openSUSE updates. The concrete entry notes: CVE-2011-3049 — Extension web request API can interfere with system requests (low severity). The openSUSE patch set (openSUSE-SU-2012:0466-1) upgrades C...