SUSE-SU-2021:14693-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2015-5218: Prevent colcrt buffer overflow. bsc949754 These non-security issues were fixed: - Mount crashes when trying to mount shmfs while SELinux is active. bsc1040414 - Fix lsblk -f on CCISS and other devices with nodes in /dev...

Ubuntu: Security Advisory (USN-4904-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: April 13, 2021 (KB5001292)

None None...

CVE-2015-20001

In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside siftup or siftdownrange panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory...

CVE-2015-20001

In Rust prior to 1.2.0, the standard library’s BinaryHeap is not panic-safe. If the comparison of generic elements inside sift_up or sift_down_range panics, the heap can be left in an inconsistent state, leading to dropping zeroed memory of an arbitrary type and a memory-safety violation. This CV...

Security Bulletin: IBM InfoSphere BigInsights affected by vulnerability in Big SQL component (CVE-2015-1889)

Summary A security vulnerability has been identified in the Big SQL component of InfoSphere BigInsights that could allow a malicious user to gain unauthorized access to the HDFS data in the cluster. Vulnerability Details CVE-ID: CVE-2015-1889 DESCRIPTION: IBM InfoSphere BigInsights contains an...

Security Bulletin: Infosphere BigInsights is affected by a vulnerability in DB2 that allows users to truncate any table even though the owner of the table has not granted any privilege to any user/role/group (CVE-2015-5020).

Summary Infosphere BigInsights is affected by a vulnerability in DB2 that allows users to truncate any table even though the owner of the table has not granted any privilege to any user/role/group. CVE-2015-5020. The vulnerability exists in the Big SQL server component included in BigInsights...

Security Bulletin: Security vulnerabilities have been identified in GSKIT and/or GSKit Crypto and Fork that are integrated with IBM DB2 and shipped with IBM InfoSphere BigInsights. (CVE-2015-7420, CVE-2015-7421, CVE-2016-0201)

Summary Security vulnerabilities have been identified in GSKIT and/or GSKit Crypto and Fork that are integrated with IBM DB2 and shipped with IBM InfoSphere BigInsights. Information about security vulnerabilities affecting GSKIT/ Crypto and Fork has been published in a security bulletin...

Security Bulletin: Vulnerability in RC4 stream cipher affects InfoSphere BigInsights (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects InfoSphere BigInsights. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this...

Security Bulletin: Infosphere BigInsights is affected by a vulnerability in DB2 (CVE-2015-1947).

Summary Infosphere BigInsights is affected by a local escalation of privilege vulnerability in DB2 CVE-2015-1947. The vulnerability exists in the Big SQL server component included in BigInsights. Vulnerability Details CVEID: CVE-2015-1947 DESCRIPTION: IBM DB2 is vulnerable to a privilege escalati...

Security Bulletin: Infosphere BigInsights is affected by vulnerabilities in Apache HBase and Hive that could allow a remote attacker to gain unauthorized access to the system or authenticate with improper credentials (CVE-2015-1772, CVE-2015-1836).

Summary Infosphere BigInsights is affected by vulnerabilities in Apache HBase and Hive that could allow a remote attacker to gain unauthorized access to the system or authenticate with improper credentials CVE-2015-1772 , CVE-2015-1836. Vulnerability Details CVEID: CVE-2015-1772 DESCRIPTION: Apac...

Security Bulletin: Vulnerabilities in GSKit affect InfoSphere BigInsights (CVE-2015-0138, CVE-2015-0159)

Summary GSKit is an IBM component that is used by InfoSphere BigInsights. The GSKit that is shipped with InfoSphere BigInsights contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. InfoSphere BigInsights has...

Security Bulletin: Infosphere BigInsights is affected by a vulnerability that could allow a local attacker to obtain the value-add services passwords stored in the Ambari configuration file (CVE-2015-4928, CVE-2015-4940).

Summary Infosphere BigInsights is affected by a vulnerability that could allow a local attacker to obtain value-add services passwords stored in the Ambari configuration file. The passwords are shown in plain text CVE-2015-4928, CVE-2015-4940. Vulnerability Details CVEID: CVE-2015-4928 DESCRIPTIO...

CVE-2015-8100 affecting package net-snmp 5.8-4

CVE-2015-8100 affecting package net-snmp 5.8-4. An upgraded version of the package is available that resolves this issue...

CVE-2015-3276 affecting package openldap 2.4.57-3

CVE-2015-3276 affecting package openldap 2.4.57-3. A patched version of the package is available...

Acunetix Web Scanner Privilege Escalation (CVE-2015-4027)

A privilege escalation vulnerability exists in Acunetix Web Vulnerability Scanner. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

SSL/TLS: Deprecated TLSv1.0 and TLSv1.1 Protocol Detection

It was possible to detect the usage of the deprecated TLSv1.0 and/or TLSv1.1 protocol on this system. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

USN-4772-1: VNC4 vulnerabilities

USN-2500-1 addressed CVE-2015-0255 for xorg-server. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. CVE-2015-0255 USN-2726-1 addressed CVE-2015-1283 for Expat. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ES...

USN-4769-1: Salt vulnerabilities

It was discovered that Salt allowed remote attackers to write to arbitrary files via a special crafted file. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. CVE-2014-3563 Andreas Stieger discovered that Salt...

USN-4768-1: musl vulnerabilities

It was discovered that musl did not properly handle kernel syscalls. An attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code. CVE-2018-1000001 It was discovered that musl did not properly handle the parsing of DNS response codes. A remote...