134 matches found
OracleVM 3.4 : kernel-uek (OVMSA-2016-0041)
The remote OracleVM system is missing necessary patches to address critical security updates : - rebuild bumping release - x86/iopl/64: properly context-switch IOPL on Xen PV Andy Lutomirski Orabug: 22997978 CVE-2016-3157 - fs/hugetlbfs/inode.c: fix bugs in hugetlbvmtruncatelist Mike Kravetz...
Oracle Linux 6 / 7 : kernel-uek (ELSA-2016-3529)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3529 advisory. - x86/iopl/64: properly context-switch IOPL on Xen PV Andy Lutomirski Orabug: 22997978 CVE-2016-3157 Tenable has extracted the preceding descriptio...
kernel-uek security update
kernel-uek 4.1.12-32.2.3 - rebuild bumping release 4.1.12-32.2.2 - x86/iopl/64: properly context-switch IOPL on Xen PV Andy Lutomirski Orabug: 22997978 CVE-2016-3157 - fs/hugetlbfs/inode.c: fix bugs in hugetlbvmtruncatelist Mike Kravetz Orabug: 22667863...
CVE-2015-3157
CVE-2015-3157 entry is rejected/not used and does not represent an active vulnerability.
Debian DSA-3157-1 : ruby1.9.1 - security update
Multiple vulnerabilities were discovered in the interpreter for the Ruby language : - CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrary code...
Debian Security Advisory DSA 3157-1 (ruby1.9.1 - security update)
Multiple vulnerabilities were discovered in the interpreter for the Ruby language: CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrary code executio...
Ubuntu: Security Advisory (USN-2298-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2959-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2959-1 [email protected] http://www.debian.org/security/ Michael Gilbert June 14, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2959-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2959-1 [email protected] http://www.debian.org/security/ Michael Gilbert June 14, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2959-1 (chromium-browser - security update)
Several vulnerabilities have been discovered in the chromium web browser. CVE-2014-3154 Collin Payne discovered a use-after-free issue in the filesystem API. CVE-2014-3155 James March, Daniel Sommermann, and Alan Frindell discovered several out-of-bounds read issues in the SPDY protocol...
DSA-2959-1 chromium-browser - security update
Bulletin has no description...
CVE-2014-3157
CVE-2014-3157 affects Google Chrome prior to 35.0.1916.153. It is a heap-based buffer overflow in FFmpegVideoDecoder::GetVideoBuffer within media/filters/ffmpeg_video_decoder.cc, exploitable remotely by sending VideoFrame data structures too small for interaction with the underlying FFmpeg librar...
CVE-2014-3157
Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpegvideodecoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that a...
UBUNTU-CVE-2014-3157
Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpegvideodecoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that a...
KLA10006 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome 35.0.1916.114 and earlier. Malicious users can exploit these vulnerabilities to cause denial of service or other possible issues. Below is a complete list of vulnerabilities 1. heap-based buffer overflow in...
Microsoft Access ACCDB File Memory Corruption (MS13-074; CVE-2013-3157)
A memory corruption vulnerability has been reported in Microsoft Access...
CVE-2013-3157
CVE-2013-3157 is tied to a Microsoft Access memory-corruption vulnerability affecting ACCDB parsing in Access 2007 SP3, 2010 SP1/SP2, and 2013. Connected advisories CPAI-2013-3692 and CPAI-2013-3688 describe a remote code execution/vector via crafted ACCDB files, caused by memory-corruption in Ac...
Microsoft Office Access Database Remote Code Execution Vulnerabilities (2848637)
This host is missing an important security update according to Microsoft Bulletin MS13-074. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2012-3157
CVE-2012-3157 concerns an unspecified vulnerability in Oracle FLEXCUBE Direct Banking within Oracle Financial Services Software versions 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0–5.3.4, 6.0.1, 6.2.0, and 12. The issue allows remote authenticated users to affect integrity and is related to the BASE compon...