90 matches found
SUSE-SU-2018:1997-1 Security update for shadow
This update for shadow fixes the following issues: - CVE-2016-6252: Incorrect integer handling could results in local privilege escalation bsc1099310...
NVIDIA Linux GPU Display Driver Multiple Vulnerabilities
The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111107; scriptversion"1.5";...
CVE-2018-6252
The CVE-2018-6252 entry concerns NVIDIA Windows GPU Display Driver: a vulnerability in the kernel-mode DxgkDdiEscape handler that may allow an attacker access to restricted functionality, potentially causing a denial of service. Connected sources corroborate that this family of NVIDIA GPU Display...
NVIDIA Windows GPU Display Driver 375.x < 377.55 / 384.x < 384.94 / 385.x < 385.08 Multiple Vulnerabilities
Nvidia GPU Display driver vulnerabilities may lead to denial of service or possible escalation of Privileges. To exploit these vulnerabilities an attacker would send a malicious request to an affected application or interact with an affected application. If successfully exploited, these...
CVE-2017-6252
CVE-2017-6252 affects the NVIDIA Windows GPU Display Driver. The vulnerability exists in the kernel mode layer handler (likely nvlddmkm.sys) where a NULL pointer dereference can cause a denial of service or potential privilege escalation. Affected product area is the NVIDIA Windows GPU Display Dr...
USN-3276-2: shadow regression | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3276-1 intended to fix a vulnerability in su. The solution introduced a regression in su signal handling. This update modifies the security fix. We apologize for the inconvenience. Original advisory...
USN-3276-2: shadow regression
USN-3276-1 intended to fix a vulnerability in su. The solution introduced a regression in su signal handling. This update modifies the security fix. We apologize for the inconvenience. Original advisory details: Sebastian Krahmer discovered integer overflows in shadow utilities. A local attacker...
CVE-2013-6252
CVE-2013-6252 entry is rejected per the Initial Description.
Ubuntu 14.04 LTS / 16.04 LTS : shadow vulnerabilities (USN-3276-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3276-1 advisory. Sebastian Krahmer discovered integer overflows in shadow utilities. A local attacker could possibly cause them to crash or potentially gain...
Security fix for the ALT Linux 8 package shadow version 1:4.2.1-alt7.M80P.1
1:4.2.1-alt7.M80P.1 built March 13, 2017 Mikhail Efremov in task 179286 --- March 7, 2017 Mikhail Efremov - Backported from upstream git: + Fix a resource leak in syslogsg. + Fix a resource leak in libmis/idmapping.c. + Free memory on error path. - Fix user busy errors at userdel patch from Fedor...
[SECURITY] [DSA 3793-1] shadow security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 24, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3793-1] shadow security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 24, 2017 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-3793-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...
CVE-2016-6252
CVE-2016-6252 is an integer overflow vulnerability in shadow 4.2.1 that can let a local user gain privileges via crafted input to newuidmap. The supplied documents confirm the affected component (shadow utilities) and the root cause (integer overflow) with explicit remediation guidance to upgrade...
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...
CVE-2016-6252
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap...
Updated shadow-utils packages fix security vulnerabilities
It was found that shadow-utils-4.2.1 had a potentially unsafe use of getlogin with the concern that the utmp entry might have a spoofed username associated with a correct uid CVE-2016-6251. It was found that shadow-utils-4.2.1 had an incorrect integer handling problem where it looks like the int...
SUSE SLED11 / SLES11 Security Update : kernel (SUSE-SU-2015:2108-1)
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2015-8104: Prevent guest to host DoS caused by infinite loop in microcode via DB exception bsc954404. - CVE-2015-5307: Prevent guest to host DoS caus...