Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in fixuppagefault in the Xen hypervisor implementation. If a 64-bit para-virtualized guest accessed a certain area of memory, it could cause a denial of service on the host system running the Xen hyperviso...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw in bcmconnect in the Linux kernel's Controller Area Network CAN Broadcast Manager. On 64-bit systems, writing the socket address may overflow the procname character array...

Privilege Escalation

kernel is vulnerable to privilege escalation. Missing sanity checks were found in gdthioctlalloc in the gdth driver in the Linux kernel. A local user with access to "/dev/gdth" on a 64-bit system could use this flaw to cause a denial of service or escalate their privileges...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. On AMD64 systems, it was discovered that the kernel did not ensure the ELF interpreter was available before making a call to the SETPERSONALITY macro. A local attacker could use this flaw to cause a denial of service by running a 32-bit application that...

Denial Of Service (DoS)

The gzip package is vulnerable to Denial Of Service DoS. An integer underflow flaw, leading to an array index error, was found in the way gzip expanded archive files compressed with the Lempel-Ziv-Welch LZW compression algorithm. If a victim expanded a specially-crafted archive, it could cause gz...

Information Disclosure

kernel is vulnerable to information disclosure. A flaw was found in the way the dosigaltstack function in the Linux kernel copies the stackt structure to user-space. On 64-bit machines, this flaw could lead to a four-byte information leak...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a flaw was found in the Xen PAL emulation on Intel 64 platforms. A guest Hardware-assisted virtual machine HVM could read the arbitrary physical memory of the host system, which could make information available to...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the backported stack unwinder fixes in Red Hat Enterprise Linux 5. On AMD64 and Intel 64 platforms, a local user could trigger this flaw and cause a denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw in the VFAT compat ioctl handling on 64-bit systems that allowed a local user to corrupt a kerneldirent struct and cause a denial of service system crash...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted loc...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the mount handling routine for 64-bit systems that allowed a local user to cause denial of service...

Denial Of Service (DoS)

php is vulnerable to denial of service. When unserializing untrusted data on 64-bit platforms, the zendhashinit function could be forced into an infinite loop, consuming CPU resources for a limited time, until the script timeout alarm aborted execution of the script...

The October 2009 stability and reliability update for Windows 7 and Windows Server 2008 R2 is available.

The October 2009 stability and reliability update for Windows 7 and Windows Server 2008 R2 is available. If this article does not answer your question, click this button to pose your question to other community members at Microsoft Community:Ask a question Summary Update information This update...

September 2016 update rollup for Windows Server 2012

September 2016 update rollup for Windows Server 2012 The September 2016 update rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this update rollup as part of your regular maintenance routines. Improvements and fixes To learn more about the...

Compatibility update is available for Windows 8 and Windows Server 2012

Compatibility update is available for Windows 8 and Windows Server 2012 Summary A compatibility update is a software update that improves the compatibility experience in Windows 8 and in Windows Server 2012. Microsoft regularly releases Windows compatibility updates to improve the overall user...

Buffer Overflow

node-weakauras-parser is vulnerable to Buffer overflows. The attack is possible due to lack of proper checking of the input size in the function encodeweakaura function, allowing an overflow with 13835058055282163711 bytes on 64-bit systems...

Security Advisory - Information Disclosure Vulnerability about SWAPGS Instruction

An information disclosure vulnerability exists when certain x86-64-bit central processing units CPU speculatively access memory, this vulnerability uses the SWAPGS instruction in the CPU. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially...

Buffer Overflow

Overview Affected versions of node-weakauras-parser are vulnerable to a Buffer Overflow. The encodeweakaura function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems. Recommendation Upgrade to versions 1.0.5, 2.0.2, 3.0.1 or...

Important: Red Hat Security Advisory: qemu-kvm-ma security update

An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2020-1345)

According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - CURL before 7.68.0 lacks proper input validation, which allows users to create a FILE: URL that can make the client access ...