Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization 3.5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Important: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CVE-2015-3209

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUSSTARTPACKET set and then a crafted packet with TXSTATUSDEVICEOWNS set...

SUSE-SU-2015:1042-1 Security update for xen

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129 bnc931626...

Debian: Security Advisory (DSA-3209-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : rhev-hypervisor (RHSA-2011:1408)

An updated rhev-hypervisor package that fixes several security issues is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

CVE-2014-3209

The ldns-keygen tool in ldns 1.6.x uses the current umask to set the privileges of the private key, which might allow local users to obtain the private key by reading the file...

CVE-2014-3209

CVE-2014-3209 affects ldns 1.6.x, specifically the ldns-keygen tool. The root cause is that ldns-keygen uses the current umask to set the privileges of the generated private key, which could allow a local attacker to read the private key file and obtain sensitive material. This is a local, unauth...

Oracle Solaris Critical Patch Update : oct2012_SRU12_4

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability requiring logon to Operating...

Oracle Solaris Critical Patch Update : oct2012_SRU10_5

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating...

Mandriva Linux Security Advisory : ldns (MDVSA-2014:085)

Updated ldns packages fix security vulnerability : ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable CVE-2014-3209. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

MGASA-2014-0212 Updated ldns package fixes CVE-2014-3209

Updated ldns packages fix security vulnerability: ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable CVE-2014-3209...

Updated ldns package fixes CVE-2014-3209

Updated ldns packages fix security vulnerability: ldns-keygen creates a private key with the default permissions according to the users umask, which in most cases will cause the private key to be world-readable CVE-2014-3209...

Memory corruption

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3203, CVE-2013-3206, CVE-2013-3207, and...

CVE-2013-3209

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3201, CVE-2013-3203, CVE-2013-3206, and...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (2870699)

This host is missing a critical security update according to Microsoft Bulletin MS13-069. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer Memory Corruption (MS13-069: CVE-2013-3209)

A remote code execution vulnerability exists in Internet Explorer...

Oracle Linux 5 : kernel (ELSA-2011-1386)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1386 advisory. - Revert: xen passthrough: block VT-d MSI trap injection Paolo Bonzini 716301 716302 CVE-2011-1898 - net bridge: fix use after free in brdeliver Amerig...

RHEL 5 : kernel (RHSA-2011:1419)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1419 advisory. - kernel: net: improve sequence number generation CVE-2011-3188 - kernel: panic occurs when clockgettime is called CVE-2011-3209 Note that...

RHEL 5 : kernel (RHSA-2011:1418)

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5.3 Long Life. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...