SUSE SLES10 Security Update : Xen (SUSE-SU-2016:1445-1)

Xen was updated to fix the following security issues : CVE-2016-2841: net: ne2000: infinite loop in ne2000receive bsc969351 CVE-2016-2391: usb: multiple eoftimers in ohci module leads to NULL pointer dereference bsc967101 CVE-2016-2270: x86: inconsistent cachability flags on guest mappings XSA-15...

CVE-2016-2391

The ohcibusstart function in the USB OHCI emulation support hw/usb/hcd-ohci.c in QEMU allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash via vectors related to multiple eoftimers...

CVE-2016-2391

CVE-2016-2391 (Normal): Affects QEMU’s USB OHCI emulation. The vulnerability is in the ohci_bus_start function (hw/usb/hcd-ohci.c) and allows a local privileged user in a guest to trigger a NULL pointer dereference, crashing the QEMU process via vectors related to multiple eof_timers, i.e., a Den...

Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-2974-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2974-1 advisory. Zuozhi Fzz discovered that QEMU incorrectly handled USB OHCI emulation support. A privileged attacker inside the guest could use this issue t...

USN-2974-1: QEMU vulnerabilities

Zuozhi Fzz discovered that QEMU incorrectly handled USB OHCI emulation support. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2016-2391 Qinghao Tang discovered that QEMU incorrectly handled USB Net emulation support. A...

Fedora 23 : xen-4.5.2-9.fc23 (2016-f4504e9445)

Qemu: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714 1296080 Qemu: i386: NULL pointer dereference in vapicwrite CVE-2016-1922 1292767 qemu: Stack-based buffer overflow in megasasctrlgetinfo CVE-2015-8613 1293305 qemu-kvm: Infinite loop and out-of-bounds transfer start i...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3076321)

This host is missing a critical security update according to Microsoft Bulletin MS15-065. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-2391

CVE-2015-2391 affects Microsoft Internet Explorer 9. The issue is a memory corruption vulnerability triggered by visiting a crafted website, enabling remote code execution or a DoS. Mitigation is via the MS15-065 security update; apply the KB3076321 patch (Security Update for Internet Explorer). ...

KLA10634 Multiple vulnerabilities in Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to read local files, cause denial of service, bypass security restrictions, execute arbitrary code, gain privileges or obtain sensitive information. Below is a comple...

Ubuntu: Security Advisory (USN-2391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Open-Xchange Security Advisory 2014-04-08

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Vulnerability type: Information exposure CWE-200 Vulnerable version: 7.4.2 and earlier Vulnerable component: frontend Fixed version: 7.4.2-rev13, 7.4.1-rev11, 7.2.2-rev20 Report confidence: Confirmed Solution status: Fixed by Vendor Vendor...

CVE-2014-2391

Open-Xchange AppSuite is affected (versions before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13). The password recovery service improperly treats a string tied to a previously used but invalid password, allowing information exposure via GET parameters present in web server ...

Open-Xchange AppSuite信息泄露漏洞

Bugtraq ID:66694 CVE ID:CVE-2014-2391 Open-Xchange Server是部分开源的项目，主要开发协同软件，例如电子邮件、日历等。 Open-Xchange AppSuite 7.4.2 及更早版本在实现上存在信息泄露漏洞，本地用户可利用此漏洞访问敏感信息。 0 open-xchange OX App Suite 7.4.2 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.open-xchange.com/home.html...

APPLE-SA-2013-09-20-1 Apple TV 6.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-09-20-1 Apple TV 6.0 Apple TV 6.0 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: Viewing a maliciously crafted PDF file may lead to an unexpected application termination or...

CVE-2011-2391

CVE-2011-2391 affects Apple’s kernel IPv6 implementation. The core issue is a race condition in the handling of IPv6 packets, which in the public description is tied to a remote denial-of-service vector via crafted ICMPv6 packets (CPU consumption). Connected sources reference this CVE in OS X/mac...

Amazon Linux AMI : mysql51 (ALAS-2013-186)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found in the References section. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2013-18...

Amazon Linux AMI : mysql55 (ALAS-2013-187)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found in the References section. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2013-18...

Ubuntu: Security Advisory (USN-1807-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2667-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2667-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 12, 2013 http://www.debian.org/security/faq -...

CentOS Update for mysql CESA-2013:0772 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...