SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2021:4121-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4121-1 advisory. - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request...

CVE-2021-4011

The CVE CVE-2021-4011 affects xorg-x11-server prior to versions 21.1.2 and 1.20.14, due to an out-of-bounds access in SwapCreateRegister. This vulnerability can impact data confidentiality, integrity, and system availability. Remediation: upgrade to xorg-x11-server 21.1.2 or 1.20.14 (and later) p...

[slackware-security] xorg-server

New xorg-server packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Note that in slackware-current there are 4 issues fixed CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, and CVE-2021-4011. In Slackware 14.0, 14.1, and 14.2 the earlier versions of xorg-server...

CVE-2021-4011

A flaw was found in xorg-x11-server where an out-of-bounds access can occur in the SwapCreateRegister function...

CVE-2009-4011

creationtimestamp| type| source ---|---|--- 2019-11-09 07:38:08+00:00| seen| https://t.me/cibsecurity/8016 2024-02-11 07:31:18+00:00| seen| https://t.me/ctinow/182698...

CVE-2009-4011

dtc-xen is a SOAP daemon used for Xen VM management. The CVE-2009-4011 issue is a race condition in dtc-xen 0.5.x before 0.5.4, caused by mishandling of concurrent access to shared resources, enabling an attacker to gain a bash shell as the xenXX user on dom0 and potentially reuse an already open...

CVE-2009-4011

Removed by vendor...

Ubuntu 14.04 LTS : jinja2 vulnerabilities (USN-4011-2)

USN-4011-1 fixed several vulnerabilities in Jinja2. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details : Olivier Dony discovered that Jinja incorrectly handled str.format. An attacker could possibly use this issue to escape the...

Ubuntu 16.04 LTS / 18.04 LTS : Jinja2 vulnerabilities (USN-4011-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4011-1 advisory. Olivier Dony discovered that Jinja incorrectly handled str.format. An attacker could possibly use this issue to escape the sandbox. This issu...

CVE-2018-4011

CUJO Smart Firewall mdnscap (firmware 7003) is affected by CVE-2018-4011: an integer underflow in SRV RDATA parsing during mDNS DNS RR processing leads to out-of-bounds heap access and a crash of the mdnscap process. The flaw arises when rdlength is small (e.g., 0x05) and the code subtracts 6 wit...

CVE-2018-4011

An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. When parsing SRV records in an mDNS packet, the "RDLENGTH" value is handled incorrectly, leading to an out-of-bounds access that crashes the mdnscap process. An unauthenticated...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4011) (Meltdown) (Spectre)

Description of changes: 4.1.12-112.14.11.el7uek - x86/pti/efi: broken conversion from efi to kernel page table Pavel Tatashin Orabug: 27363926 Orabug: 27352353 CVE-2017-5754 - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT redux Konrad Rzeszutek Wilk Orabug: 27369994 -...

Debian DSA-4011-1 : quagga - security update

It was discovered that the bgpd daemon in the Quagga routing suite does not properly calculate the length of multi-segment ASPATH UPDATE messages, causing bgpd to drop a session and potentially resulting in loss of network connectivity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2017-4011

Embedding Script XSS in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request...

CVE-2017-4011

McAfee Network Data Loss Prevention (NDLP) 9.3.x is affected by a Cross‑Site Scripting (XSS) vulnerability in the server (notably via the User‑Agent header as per the nuclei template) that allowed remote attackers to view session/cookie data by modifying HTTP requests. Exploitation details are pr...

“Target Device boot fails with error PXE-E55 : ProxyDHCP service did not reply to request on port 4011"

“Target Device boot fails with error PXE-E55 : ProxyDHCP service did not reply to request on port 4011"...

IBM AIX 6.1 / 7.1 - Local Root Privilege Escalation

No description provided by source. Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen [email protected] Vendor Homepage: http://www.ibm.com Software...

CVE-2014-4011

CVE-2014-4011 concerns SAP Capacity Leveling where credentials are hardcoded, enabling remote access via unspecified vectors. The available sources confirm the issue and its impact as partial confidentiality compromise with potential unauthorized access, but do not provide concrete exploit detail...

IBM AIX 6.17.1 - Local Privilege Escalation

IBM AIX 6.17.1 - Local Privilege Escalation Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link:...

IBM AIX 6.1 / 7.1 - Local root Privilege Escalation Vulnerability

Exploit for aix platform in category local exploits !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html...