(RHSA-2018:0009) Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three...

(RHSA-2018:0007) Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three...

Security Advisory 0031

Security Advisory 0031 PDF Date: January 3rd, 2018 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | January 3rd, 2018 | Initial Release 1.1 | January 8th, 2018 | Updated description with expanded analysis Arista Products vulnerability report for the following CVEs: Spectre CVE-2017-5753:...

Security Notice: CPU Speculative Side Channel Vulnerabilities

NVIDIA's response to CPU speculative side channel vulnerabilities CVE-2017-5753, CVE-2017-5715, and CVE-2017-5754 January 3, 2018 This notice is in response to Google Project Zero's publication of novel information disclosure attacks that combine CPU speculative execution with known side channels...

Critical: kernel

Issue Overview: An updated kernel release for Amazon Linux has been made available which prevents speculative execution of indirect branches within the kernel. This release incorporates latest stable open source Linux security improvements to address CVE-2017-5715 within the kernel and builds upo...

CVE-2016-5754

NetIQ Access Manager (NAM) is affected by CVE-2016-5754. The vulnerability is an information disclosure caused by the presence of an ".htaccess" file that could leak sensitive information in NAM versions 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP2. The CNVD entry confirms a NAM information-disc...

CVE-2015-5754

creationtimestamp| type| source ---|---|--- 2015-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38136...

CVE-2015-5754

CVE-2015-5754 describes a race condition in macOS OS X Install.framework’s private runner that runs as setuid-root. The bug arises when a distributed object Proxy (DO) interacts with IFInstallRunner and the runner’s privileges are dropped then potentially re‑gained, allowing a second proxy to obs...

CVE-2014-5530

CVE-2014-5530 is rejected/not used; refer to CVE-2014-5754, CVE-2014-5755, or CVE-2014-8538.

CVE-2013-5754

CVE-2013-5754 affects Dahua DVR appliances. The authorization implementation accepts a hash string representing the current date as a master password, enabling remote attackers to obtain administrative access and change the administrator password via requests over ActiveX, a standalone client, or...

BulletProof FTP Client '.bps' File Buffer Overflow Vulnerability

This host has BulletProof FTP Client installed and is prone to Stack-Based Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbpftpclientbofvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ BulletProof FTP Client '.bps' File Buffer Overflow Vulnerability Authors: Sharath S Copyright:...

CVE-2008-5754

Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .bps file aka Session-File with a long second line, possibly a related issue to CVE-2008-5753...

CVE-2008-5754

BulletProof FTP Client is affected by a stack-based buffer overflow in .bps Session-File handling, enabling arbitrary code execution via a crafted file with a long second line. The issue is characterized in CVE-2008-5754 (and related CVE-2008-5753). Public sources (OpenVAS, Exploit-DB/PacketStorm...

CVE-2008-2694

creationtimestamp| type| source ---|---|--- 2008-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5754...

Debian: Security Advisory (DSA-1304-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5754

CVE-2007-5754 affects phpFaber URLInn 2.0.5, where a PHP remote file inclusion vulnerability exists in urlinn_includes/config.php. The issue allows an attacker to supply a URL to the dir_ws parameter to execute arbitrary PHP code on the server. This is evidenced by references to exploit-DB and vu...

Debian DSA-1304-1 : kernel-source-2.6.8 - several vulnerabilities

CVE-2006-6060 CVE-2006-6106 CVE-2006-6535 CVE-2007-0958 CVE-2007-1357 CVE-2007-1592 Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. This update also fixes a regression in the smbfs subsystem...

[SECURITY] [DSA 1304-1] New Linux kernel 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1304-1 [email protected] http://www.debian.org/security/ Dann Frazier June 16th, 2007 http://www.debian.org/security/faq -...

kernel security update

CentOS Errata and Security Advisory CESA-2007:0014 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

CVE-2006-5754

CVE-2006-5754 is a Linux kernel local vulnerability in the aio_setup_ring path where an incorrect initialization of nr_pages can lead to a local DoS (crash). The issue is described in multiple advisories and open‑source scanning feeds as part of a broader set of kernel flaws resolved by kernel up...