CVE-2015-4527

EMC Avamar Server (7.x, prior to 7.1.2) and Avamar Virtual Edition (AVE) (7.x, prior to 7.1.2) are affected by a directory traversal flaw. The vulnerability allows remote attackers to read arbitrary files by sending crafted parameters via the Avamar Desktop/Laptop client interface. Root cause is ...

CVE-2013-4527

Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers...

CVE-2013-4527

CVE-2013-4527 is a buffer overflow in QEMU's hardware timer driver, specifically hw/timer/hpet.c, vulnerable up to versions before 1.7.2. The issue could allow an unauthenticated, remote attacker to execute arbitrary code via vectors related to the number of timers. Public advisories (SUSE/openva...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix multiple security issues are now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Ubuntu: Security Advisory (USN-2342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2342-1: QEMU vulnerabilities

Michael S. Tsirkin, Anthony Liguori, and Michael Roth discovered multiple issues with QEMU state loading after migration. An attacker able to modify the state data could use these issues to cause a denial of service, or possibly execute arbitrary code. CVE-2013-4148, CVE-2013-4149, CVE-2013-4150,...

RedHat Update for qemu-kvm RHSA-2014:0927-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : qemu-kvm (ELSA-2014-0927)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0927 advisory. - Resolves: bz1095782 CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid configlen rhel-7.0.z -...

qemu-kvm security and bug fix update

1.5.3-60.el70.5 - kvm-Allow-mismatched-virtio-config-len.patch bz1095782 - Resolves: bz1095782 CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid configlen rhel-7.0.z 1.5.3-60.el70.4 - kvm-zero-initialize-KVMSETGSIROUTING-input.patch bz1110693 -...

CVE-2014-4527

The CVE-2014-4527 entry concerns the WordPress EnvialoSimple plugin (envialosimple-email-marketing-y-newsletters-gratis) with multiple XSS vulnerabilities. The affected component is the PHP script paginas/vista-previa-form.php, where XSS can be triggered via the FormID or AdministratorID paramete...

openSUSE Security Update : mcrypt (openSUSE-SU-2012:1440-1)

Some potential mcrypt buffer overflows in the commandline tool were fixed, which could lead to early aborts of mcrypt. Due to FORTIFYSOURCE catching such cases, it would have only aborted mcrypt with a buffer overflow backtrace. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

MCrypt: User-assisted execution of arbitrary code

Background MCrypt is a replacement of the old unix crypt1 utility. Description Multiple vulnerabilities have been discovered in MCrypt: A boundary error in MCrypt could cause a stack-based buffer overflow CVE-2012-4409. MCrypt contains multiple format string errors CVE-2012-4426. MCrypt does not...

UBUNTU-CVE-2013-4527

Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers...

Oracle Linux 4 : kernel (ELSA-2011-0263)

From Red Hat Security Advisory 2011:0263 : Updated kernel packages that fix three security issues, hundreds of bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the ninth regular update. The Red Hat...

CVE-2012-4527

CVE-2012-4527: MCrypt (mcrypt) up to version 2.6.8 is affected by a stack-based buffer overflow when handling long file names, enabling a user-assisted remote attacker to crash the process or potentially execute arbitrary code. The issue is documented across multiple advisories (Gentoo GLSA 20140...

Fedora Update for mcrypt FEDORA-2012-17318

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mcrypt FEDORA-2012-17290

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora 17 : mcrypt-2.6.8-10.fc17 (2012-17290)

Apply workaround for CVE-2012-4527. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 16 : mcrypt-2.6.8-10.fc16 (2012-17318)

Apply workaround for CVE-2012-4527. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 13 : kernel-2.6.34.9-69.fc13 (2011-6447)

Update to kernel 2.6.34.9 : http://ftp.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.34/ChangeLog -2.6.34.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...