GLSA-201604-01 : QEMU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201604-01 QEMU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : Local users within a guest QEMU environment can execute...

Fedora 23 : xen-4.5.2-9.fc23 (2016-f4504e9445)

Qemu: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714 1296080 Qemu: i386: NULL pointer dereference in vapicwrite CVE-2016-1922 1292767 qemu: Stack-based buffer overflow in megasasctrlgetinfo CVE-2015-8613 1293305 qemu-kvm: Infinite loop and out-of-bounds transfer start i...

CVE-2015-2198

The CVE-2015-2198 entry concerns Beehive Forum 1.4.4, where multiple XSS vulnerabilities exist in edit_prefs.php. The flaw stems from how the parameters homepage_url, pic_url, and avatar_url are handled inside error messages, allowing remote attackers to inject arbitrary script/HTML. Red Hat and ...

CVE-2014-2198

Cisco CDM in Unified CDM Platform Software prior to 4.4.2 contains a default SSH private key, enabling remote attackers to access support/root accounts by extracting the key from a binary in another installation (Bug CSCud41130). The Cisco advisory confirms multiple vulnerabilities, including a D...

CVE-2011-2198

The "insert-blank-characters" capability in caps.c in gnome-terminal vte before 0.28.1 allows remote authenticated users to cause a denial of service CPU and memory consumption and crash via a crafted file, as demonstrated by a file containing the string "\033100000000000000000@"...

CVE-2011-2198

CVE-2011-2198 affects the gnome-terminal component (vte) via the insert-blank-characters capability in caps.c, vulnerable before 0.28.1. A crafted escape sequence like "\033[100000000000000000@" can cause a DoS (high CPU/memory usage and crash) when processed by a remote authenticated user. Publi...

CVE-2011-2198

The "insert-blank-characters" capability in caps.c in gnome-terminal vte before 0.28.1 allows remote authenticated users to cause a denial of service CPU and memory consumption and crash via a crafted file, as demonstrated by a file containing the string "\033100000000000000000@"...

Ubuntu: Security Advisory (USN-2198-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS : linux vulnerability (USN-2198-1)

A flaw was discovered in the Linux kernel's pseudo tty pty device. An unprivileged user could exploit this flaw to cause a denial of service system crash or potentially gain administrator privileges. Note that Tenable Network Security has extracted the preceding description block directly from th...

Fedora 15 : vte-0.28.1-1.fc15 / vte3-0.28.1-1.fc15 (2011-9330)

This update fixes a possible memory exhaustion flaw in vte CVE-2011-2198. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Debian DSA-2198-1 : tex-common - insufficient input sanitization

Mathias Svensson discovered that tex-common, a package shipping a number of scripts and configuration files necessary for TeX, contains insecure settings for the 'shellescapecommands' directive. Depending on the scenario, this may result in arbitrary code execution when a victim is tricked into...

SuSE 11 Security Update : cpio (SAT Patch Number 2198)

This update fixes a heap-based buffer overflow flaw that can happen while expanding specially crafted archive files. CVE-2010-0624 - This updates Dat160 Tape Drive density information bnc415166 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Fedora Update for rpm FEDORA-2010-9829

Check for the Version of rpm OpenVAS Vulnerability Test Fedora Update for rpm FEDORA-2010-9829 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for rpm FEDORA-2010-10617

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rpm FEDORA-2010-9829

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-2198

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by...

CVE-2010-2198

CVE-2010-2198 affects RPM 4.8.0 and earlier; root cause in lib/fsm.c is that metadata for an executable file is not properly reset during upgrade/removal of an RPM package. This can allow local users to gain privileges or bypass access restrictions by creating a hard link to the vulnerable file t...

CVE-2010-2198

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by...

CVE-2009-2198

CVE-2009-2198 affects Apple GarageBand prior to 5.1 on macOS. The issue stems from GarageBand reconfiguring Safari to accept all cookies regardless of domain, enabling easier tracking by remote servers. Documented impact is information disclosure via tracking; no explicit exploitation details are...

Fedora Update for openoffice.org FEDORA-2007-375

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...