Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel (HWE) vulnerability (USN-3256-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3256-2 advisory. USN-3256-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 16.10. This update provides the corresponding...

CVE-2017-3256

CVE-2017-3256 affects Oracle MySQL Server (subcomponent: Server: Replication). Affected: MySQL 5.7.16 and earlier. Description specifies that a low-privileged attacker with network access via multiple protocols can cause a hang or a frequent crash (complete DOS) of MySQL Server. Connected documen...

CVE-2017-3256

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

Oracle Mysql Security Updates (jan2017-2881727) 01 - Linux

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescription...

Oracle Mysql Security Updates (jan2017-2881727) 01 - Windows

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescription...

CVE-2017-3256

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

UBUNTU-CVE-2017-3256

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2016-3256

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."...

CVE-2016-3256

The CVE-2016-3256 issue pertains to Microsoft Windows 10 Gold and 1511 where Windows Secure Kernel Mode improperly handles objects in memory, allowing a locally authenticated attacker to read sensitive information via a specially crafted application. The vulnerability is described as an informati...

MS16-089: Security Update for Windows Secure Kernel Mode (3170050)

The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the Windows Secure Kernel Mode due to improper handling of objects in memory. An authenticated, remote attacker can exploit this, via a crafted application, to disclose...

Oracle: Security Advisory (ELSA-2016-0189)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for polkit RHSA-2016:0189-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : polkit (ELSA-2016-0189)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0189 advisory. 0.112-6 - Fix CVE-2015-3256 Resolves: 1271790 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Scientific Linux Security Update : polkit on SL7.x x86_64 (20160216)

A denial of service flaw was found in how polkit handled authorization requests. A local, unprivileged user could send malicious requests to polkit, which could then cause the polkit daemon to corrupt its memory and crash. CVE-2015-3256 The system must be rebooted for this update to take effect...

RHEL 7 : polkit (RHSA-2016:0189)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0189 advisory. PolicyKit is a toolkit for defining and handling authorizations. A denial of service flaw was found in how polkit handled authorization requests. A...

Moderate: Red Hat Security Advisory: polkit security update

Updated polkit packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from...

polkit security update

0.112-6 - Fix CVE-2015-3256 Resolves: 1271790...

openSUSE Security Update : polkit (openSUSE-2015-711)

polkit was updated to the 0.113 release, fixing security issues and bugs. Security issues fixed : - Fixes CVE-2015-4625, a local privilege escalation due to predictable authentication session cookie values. Thanks to Tavis Ormandy, Google Project Zero for reporting this issue. For the future,...

SUSE SLED12 / SLES12 Security Update : polkit (SUSE-SU-2015:1838-1)

polkit was updated to the 0.113 release, fixing security issues and bugs. Security issues fixed : - Fixes CVE-2015-4625, a local privilege escalation due to predictable authentication session cookie values. Thanks to Tavis Ormandy, Google Project Zero for reporting this issue. For the future,...

CVE-2015-3256

CVE-2015-3256 affects PolicyKit (polkit) until version 0.113, with a denial-of-service/privacy risk due to memory corruption and polkitd crashes, tied to javascript rule evaluation. The vulnerability is locally exploitable by unprivileged users and may enable privilege escalation. Public document...