202 matches found
USN-1362-1: Linux kernel vulnerabilities
Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. CVE-2011-3353 A flaw was found in KVM's Programmable Interval Timer PIT. When a virtual interrupt control is not available a local user could use this to caus...
Fedora Update for kernel FEDORA-2012-1503
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-1503 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2011-4622
CVE-2011-4622 affects KVM (arch/x86/kvm/i8254.c) where create_pit_timer mishandles PIT IRQs if an irqchip is not available, allowing a local user to trigger a denial-of-service via NULL pointer dereference by starting a PIT timer. The vulnerability is referenced in MiracleLinux AXSA advisories as...
CentOS 5 : kvm (CESA-2012:0051)
Updated kvm packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...
kvm security update
kvm-83-239.0.1.el57.1 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-239.el57.1 - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch bz772079 - Resolves: bz772079 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy...
Debian DSA-2389-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-2183 Andrea Righi reported an issue in KSM, a memory-saving de-duplication...
Fedora Update for kernel FEDORA-2012-0492
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for kernel FEDORA-2012-0492
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-0492 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora 15 : kernel-2.6.41.9-1.fc15 (2012-0492)
Update to Linux 3.1.9 stable release - Fixes CVE-2011-4347, CVE-2011-4622, CVE-2012-0045 - Other assorted other fixes. This should fix suspend/resume bugs that are found in 3.1.5/3.1.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
DSA-2389-1 linux-2.6 - several
Bulletin has no description...
Linux kernel 2.6.x KVM 'create_pit_timer()'函数本地拒绝服务漏洞
Bugtraq ID: 51172 CVE ID：CVE-2011-4622 Linux是一款开放源代码的操作系统。 用户空间可创建PIT但忘记了设置irqchips，在这种情况下本地攻击者可以通过PIT IRQs使主机崩溃： codeBUG: unable to handle kernel NULL pointer dereference at 0000000000000128 IP: ffffffffa10f6280 kvmsetirq+0x30/0x170 kvm ... Call Trace: ffffffffa11228c1 pitdowork+0x51/0xd0 kvm...
CVE-2009-4622
Mode C: The CVE-2009-4622 entry describes a PHP remote file inclusion in Drunken:Golem Gaming Portal 0.5.1 alpha 2, via a URL in the root_path parameter of admin_news_bot.php, enabling remote code execution. Vulnerable component/file: admin/admin_news_bot.php (Drunken:Golem Portal 0.5.1 alpha 2)....
CVE-2009-4622
creationtimestamp| type| source ---|---|--- 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9635...
CVE-2008-4622
The vulnerability CVE-2008-4622 affects phpFastNews 1.0.0, where the isLoggedIn function in fastnews-code.php can be bypassed by setting the fn-loggedin cookie to 1, allowing remote attackers to gain administrative access. This is a credential bypass issue with a CVSS v2 base score of 7.5 (HIGH) ...
CVE-2008-4622
creationtimestamp| type| source ---|---|--- 2008-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6779...
AIX 5.2 TL 10 : bos.net.tcp.client (U812065)
The remote host is missing AIX PTF U812065, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U812065. The text itself is copyright C...
iDefense Security Advisory 10.30.07: IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability
IBM AIX dig dnsnamefromtext Integer Underflow Vulnerability iDefense Security Advisory 10.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 30, 2007 I. BACKGROUND dig is a utility that is commonly used for DNS diagnostics. Under AIX 5.2, the dig program is installed by default and ...
CVE-2006-4622
The CVE-2006-4622 entry concerns AnnonceV (aka annoncesV) PHP component AnnonceV 1.1. The vulnerability is a PHP remote file inclusion in annonce.php triggered via the page parameter, allowing an attacker to execute arbitrary PHP code on the affected system. Documented impact is remote code execu...
CVE-2005-4622
The CVE-2005-4622 entry describes a directory traversal vulnerability in eFileGo 3.01. The risk stems from an input handling flaw that allows an attacker to traverse directories and execute arbitrary code, read arbitrary files, and upload arbitrary files via a crafted request (notably in the URL ...
