595 matches found
[SECURITY] [DSA 4117-1] gcc-4.9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4117-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 17, 2018 https://www.debian.org/security/faq -...
DSA-4117-1 gcc-4.9 - update
Bulletin has no description...
Debian: Security Advisory (DSA-4117)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-2600
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...
eBPF 4.9-stable Verifier Bug Backported
eBPF verifier bug backported to 4.9-stable Moving this one to a separate bug report... Commit https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=332270fdc8b6fba07d059a9ad44df9e1a2ad4529 adds functionality that permits performing addition on PTRTOSTACK stack pointer with...
Linux kernel denial of service vulnerability (CNVD-2017-38518)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in Linux kernel versions 4.9.x through 4.9.71. The vulnerability arises...
Linux Kernel >= 4.9 eBPF memory corruption bugs Vulnerability
Exploit for linux platform in category dos / poc Hi! A few BPF verifier bugs in the Linux kernel, most of which can be used for controlled memory corruption, have been fixed over the last days. One of the bugs was introduced in 4.9, the others were only introduced in 4.14. The fixes are in the ne...
CVE-2017-17564
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service host OS crash or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode...
DEBIAN-CVE-2017-17563
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service host OS crash or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode...
CVE-2017-17566
An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service host OS crash or gain host OS privileges in shadow mode by mapping a certain auxiliary page...
CVE-2017-17564
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service host OS crash or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode...
CVE-2017-17563
CVE-2017-17563 affects the Xen hypervisor (through 4.9.x) where a bug in the reference-count overflow check in shadow mode allows a guest OS user to cause a host-OS denial of service (host crash) or gain host privileges. The issue comes from an incorrect mask in reference-count overflow checking....
CVE-2017-17044
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service infinite loop and host OS hang by leveraging the mishandling of Populate on Demand PoD errors...
WordPress 4.3.0-4.9 - HTML Language Attribute Escaping
...
WordPress 1.5.0-4.9 - RSS and Atom Feed Escaping
...
WordPress In Link 1.0 SQL Injection
Vulnerability Type: SQL injection is POST parameter "keyword" Affected plugin: --------------------------------------- In Link Version: 1.0 Requires WordPress Version: 2.8 or higher Compatible up to: 2.8 URL: https://wordpress.org/plugins/inlinks/ plugin has been closed after the report...
CVE-2017-15597
An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy operation is being done on a grant of a dying...
CVE-2017-15597
CVE-2017-15597 affects Xen up to 4.9.x. A grant-copy operation on a dying-domain grant can lead to hypervisor memory corruption, likely causing host crash and Denial of Service; privilege escalation and information leaks cannot be ruled out. Publicly available advisories indicate fixes in multipl...
CVE-2017-10284
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Stored Procedure. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...