84 matches found
Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2336-1)
A flaw was discovered in the Linux kernel virtual machine's kvm validation of interrupt requests irq. A guest OS user could exploit this flaw to cause a denial of service host OS crash. CVE-2014-0155 Andy Lutomirski discovered a flaw in the authorization of netlink socket operations when a socket...
Ubuntu: Security Advisory (USN-2337-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2335-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2332-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[USN-2332-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-2332-1 September 02, 2014 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
RHEL 6 : kernel-rt (RHSA-2014:1083)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1083 advisory. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A NULL pointer dereference flaw was found in the wa...
openSUSE Security Update : kernel (openSUSE-SU-2014:0985-1)
The Linux kernel was updated to fix security issues and bugs : Security issues fixed: CVE-2014-4699: The Linux kernel on Intel processors did not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allowed local users...
kernel: security and bugfix update (important)
The Linux kernel was updated to fix security issues and bugs: Security issues fixed: CVE-2014-4699: The Linux kernel on Intel processors did not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allowed local users ...
kernel: security and bugfix update (important)
The Linux Kernel was updated to fix various bugs and security issues. CVE-2014-4699: The Linux kernel on Intel processors did not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allowed local users to leverage a...
CVE-2014-4653
sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service use-after-free and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX acce...
BELL-CVE-2014-4653 CVE-2014-4653 does not affect BellSoft software
Bulletin has no description...
CVE-2014-4653
Summary (CVE-2014-4653) : The ALSA control implementation in the Linux kernel has a race/lock handling issue in sound/core/control.c. It does not ensure possession of a read/write lock, enabling a local attacker to trigger a denial of service (use-after-free) and to potentially read kernel memory...
CVE-2014-4653
sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service use-after-free and obtain sensitive information from kernel memory by leveraging /dev/snd/controlCX acce...
CVE-2013-4653
CVE-2013-4653 covers multiple XSS flaws in the signin flow of Alcatel-Lucent Omnitouch/MyTeamwork components: 8660 My Teamwork (before 6.7), 8670 AMDS (before 6.7), 8460 Advanced Communication Server (before 9.1), and OmniTouch 8400 iCS (before 6.7.3). Flaws allow remote code injection via a craf...
SuSE 10 Security Update : xpdf (ZYPP Patch Number 7324)
This update of xpdf fixes an out-of-bounds write in CharCodeToUnicode.cc and a bad instruction pointer while parsing malformed PDF files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...
CVE-2009-4653
CVE-2009-4653 : Novell eDirectory 8.8 SP5 for Windows is affected by a stack-based buffer overflow in the dhost module, allowing remote authenticated users to cause a denial of service (dhost.exe crash) and potentially execute arbitrary code via a long string to /dhost/modules?I:. The issue is co...
CVE-2009-4653
creationtimestamp| type| source ---|---|--- 2009-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33351...
CVE-2008-4653
The CVE-2008-4653 entry concerns the Makale 0.26 XOOPS module (and possibly other Makale versions). The vulnerability is a SQL injection in makale.php that allows a remote attacker to execute arbitrary SQL commands via the id parameter. The available documents consistently identify the affected c...