89 matches found
Moderate: Red Hat Security Advisory: mariadb security and bug fix update
An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2010-3309
CVE-2010-3309 is rejected/not used; this candidate does not represent an active vulnerability entry.
[slackware-security] mariadb
New mariadb packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.31-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...
openSUSE Security Update : mysql-community-server (openSUSE-2017-555) (Riddle)
This update for mysql-community-server to version 5.6.36 fixes the following issues : These security issues were fixed : - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...
openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:1209-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for community-mysql FEDORA-2017-fe6e14dcf9
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for community-mysql FEDORA-2017-ef6bed485e
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3834-1] mysql-5.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3834-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2017 https://www.debian.org/security/faq -...
CVE-2017-3309
CVE-2017-3309 affects the MySQL Server component (Server: Optimizer) of Oracle MySQL. Affected are MySQL server branches 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability is exploitable remotely over multiple protocols by a low-privileged attacker, potentially caus...
CVE-2017-3309
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple...
UBUNTU-CVE-2017-3309
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple...
MySQL 5.6.x < 5.6.36 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU) (Riddle)
The version of MySQL running on the remote host is 5.6.x prior to 5.6.36. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...
CVE-2016-3309
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...
CVE-2016-3309
CVE-2016-3309 is a Windows kernel Win32k elevation-of-privilege vulnerability. A local attacker could gain SYSTEM privileges by exploiting a pool/handle-management issue in win32k, enabling code execution in kernel mode. Connected sources document an exploit (win32kfull!bFill pool overflow) and i...
CVE-2016-3309
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...
Microsoft Windows Win32k Elevation of Privilege (MS16-098: CVE-2016-3309)
An elevation of privilege vulnerability exists in the Windows Kernel. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...
Debian DSA-3309-1 : tidy - security update
Fernando Munoz discovered that invalid HTML input passed to tidy, an HTML syntax checker and reformatter, could trigger a buffer overflow. This could allow remote attackers to cause a denial of service crash or potentially execute arbitrary code. Geoff McLane also discovered that a similar issue...
Cisco IOS XE NTP Information Disclosure (CSCuj66318)
The remote Cisco device potentially contains an issue with the 'ntp access-group' which could allow a remote attacker to bypass the NTP access group and query an NTP server configured to deny-all requests. TRUSTED...
CVE-2014-3309
Summary of CVE-2014-3309 (Cisco) : The NTP implementation in Cisco IOS and IOS XE is vulnerable due to improper handling of the ntp access-group command in a deny-all configuration, potentially allowing a remote attacker to bypass NTP access restrictions and query the NTP server configured to den...