Fedora Update for xen FEDORA-2012-19828

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for xen FEDORA-2012-19828

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-19828 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

openSUSE: Security Advisory for XEN (openSUSE-SU-2012:1572-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 : kernel (CESA-2012:1540)

Updated kernel packages that fix multiple security issues, two bugs, and add two enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which...

CentOS Update for kernel CESA-2012:1540 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 : kernel (RHSA-2012:1540)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1540 advisory. - kernel: rds-ping cause kernel panic CVE-2012-2372 - kernel: net: slab corruption due to improper synchronization around inet-opt...

kernel security, bug fix, and enhancement update

kernel 2.6.18-308.24.1.el5 - Revert: scsi sg: fix races during device removal Ewan Milne 868950 861004 2.6.18-308.23.1.el5 - net bnx2x: Add remote-fault link detection Alexander Gordeev 870120 796905 - net bnx2x: Cosmetic changes Alexander Gordeev 870120 796905 - net rds-ping cause kernel panic...

XEN: security and bugfix update (important)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

Fedora 17 : xen-4.1.3-6.fc17 (2012-18242)

A guest can block a cpu by setting a bad VCPU deadline XSA 20, CVE-2012-4535 876198 HVM guest can use invalid pirq values to crash xen XSA 21, CVE-2012-4536 876200 HVM guest can exhaust p2m table crashing xen XSA 22, CVE-2012-4537 876203 PAE HVM guest can crash hypervisor XSA-23, CVE-2012-4538...

Fedora Update for xen FEDORA-2012-18242

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-4535

Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service Xen infinite loop and physical CPU consumption by setting a VCPU with an "inappropriate deadline."...

CVE-2012-4535

CVE-2012-4535 affects Xen hypervisor (Xen 3.4 through 4.2, and possibly earlier) where a VCPU set with an inappropriate deadline can cause a denial of service via an infinite loop and excessive CPU use by local guest OS admins. Public documents in connected advisories (Xen/XSA entries and vendor ...

CVE-2011-4535

CVE-2011-4535 is a buffer overflow in TurboPower Abbrevia prior to 4.0, embedded in ScadaTEC ScadaPhone 5.3.11.1230 and ScadaTEC ModbusTagServer 4.1.1.81 and other products. The overflow occurs while handling ZIP files and can cause a denial of service or potentially allow arbitrary code executio...

CVE-2011-4535

creationtimestamp| type| source ---|---|--- 2011-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17817 2011-09-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17833 2018-05-29 15:50:33+00:00| seen|...

Fedora Update for Django FEDORA-2011-0096

Check for the Version of Django OpenVAS Vulnerability Test Fedora Update for Django FEDORA-2011-0096 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for Django FEDORA-2011-0096

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1040-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2010-4535

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...

CVE-2010-4535

CVE-2010-4535 concerns the password reset in Django’s django.contrib.auth. The issue arises because the base36 timestamp string used in reset URLs is not validated for length, which allows remote attackers to cause resource consumption (DoS) by supplying a very large base36 integer. Affected are ...

CVE-2010-4535

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...