[SECURITY] [DSA 3804-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3804-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 08, 2017 https://www.debian.org/security/faq -...

CVE-2017-6346

Race condition in net/packet/afpacket.c in the Linux kernel allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a multithreaded application that makes PACKETFANOUT setsockopt system calls...

CVE-2017-6346

Race condition in net/packet/afpacket.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a multithreaded application that makes PACKETFANOUT setsockopt system calls...

CVE-2017-6346

CVE-2017-6346 affects the Linux kernel net/packet/af_packet.c, describing a race condition in the PACKET_FANOUT fanout path that can cause a use-after-free in multithreaded user apps. The connected sources confirm this is a local vulnerability with potential denial of service and possible unspeci...

CVE-2017-6346

Race condition in net/packet/afpacket.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a multithreaded application that makes PACKETFANOUT setsockopt system calls...

CVE-2017-6346

Race condition in net/packet/afpacket.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a multithreaded application that makes PACKETFANOUT setsockopt system calls...

DEBIAN-CVE-2016-6346

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2016-6346

CVE-2016-6346 affects RESTEasy: enabling a vulnerable GZIP decompression path can cause a denial of service via unspecified vectors. The Ubuntu advisory USN-7630-1 documents RESTEasy vulnerabilities including CVE-2016-6346 and notes affected Ubuntu releases; Nessus/OSS advisories reference unpatc...

CVE-2016-6346

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2015-6346

CVE-2015-6346 is a cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) web interface, specifically in ACS 5.7(0.15). The root cause, per Cisco’s advisory, is a lack of input validation in DOM handling, enabling a DOM-based XSS when a crafted URL is processed. The ...

Microsoft Internet Explorer Multiple Vulnerabilities (3003057)

This host is missing a critical security update according to Microsoft Bulletin MS14-065. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-6346

CVE-2014-6346 affects Microsoft Internet Explorer 8–11 and is described as a cross-domain information-disclosure vulnerability. The root cause involves improper enforcement of cross-domain policies that can allow a crafted web page to read content from another domain or security zone. Public expl...

Microsoft Internet Explorer Cross-domain Information Disclosure (MS14-065: CVE-2014-6346)

An Information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to improper enforcement of cross-domain policies. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of Interne...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6346. Reason: This candidate is a duplicate of CVE-2013-6346. Notes: All CVE users should reference CVE-2013-6346 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2013-6346

Cross-site request forgery CSRF vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6346

Cross-site request forgery CSRF vulnerability in the ZCC page in Novell ZENworks Configuration Management ZCM before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2008-6346

The CVE-2008-6346 entry describes a Cross-site Scripting (XSS) flaw in the DR Wiki (dr_wiki) extension for TYPO3, affecting version 1.7.1 and earlier. The vulnerability permits remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: dr_wiki TYPO3 exten...

CVE-2007-6346

CVE-2007-6346 affects Rainboard before 2.10 and is described in JVN as a cross-site scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary script or HTML in a user’s browser via unspecified vectors. The JVN entry notes impact on the user interface (arbitrary script execu...

CVE-2006-6346

SAP Internet Graphics Service (IGS) affected: 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier (CVE-2006-6346). Described as an unspecified vulnerability related to "Undocumented Features" that could allow remote attackers to cause a denial of service, obtain configuration files,...