Ubuntu: Security Advisory (USN-3099-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3097-1: Linux kernel vulnerabilities

Marco Grassi discovered a use-after-free condition could occur in the TCP retransmit queue handling code in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2016-6828 Pengfei Wang discovered a race condition in the...

Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3099-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3099-3 advisory. Vladimr Bene discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3099-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3099-4 advisory. Vladimr Bene discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote...

USN-3099-2 Linux kernel vulnerabilities | Cloud Foundry

USN-3099-2 Linux kernel vulnerabilities High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description USN-3099-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-1076)

The openSUSE Leap 42.1 kernel was updated to 4.1.31 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-2847: fs/pipe.c in the Linux kernel did not limit the amount of unread data in pipes, which allowed local users to cause a denial of service memory...

Fedora 23 : kernel (2016-f1adaaadc6)

The -101 build is an incremental build. it contains several fixes for known bugzillas and one fix for a known oom regression. ---- This is a rebase to 4.7.2. The 4.7.2 contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description...

[SECURITY] [DSA 3659-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3659-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2016 https://www.debian.org/security/faq -...

DSA-3659-1 linux - security update

Bulletin has no description...

[SECURITY] [DLA 609-1] linux security update

Package : linux Version : 3.2.81-2 CVE ID : CVE-2016-3857 CVE-2016-4470 CVE-2016-5696 CVE-2016-5829 CVE-2016-6136 CVE-2016-6480 CVE-2016-6828 CVE-2016-7118 Debian Bug : 827561 This update fixes the CVEs described below. CVE-2016-3857 Chiachih Wu reported two bugs in the ARM OABI compatibility lay...

Amazon Linux AMI : kernel (ALAS-2016-740)

A use after free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2016-740. include'compat.inc'; if description...

Medium: kernel

Issue Overview: A use after free vulnerability was found in tcpxmitretransmitqueue and other tcp functions. Affected Packages: kernel Issue Correction: Run yum update kernel or yum update --advisory ALAS-2016-740 to update your system. New Packages: i686: kernel-devel-4.4.19-29.55.amzn1.i686...

Fedora 24 : kernel (2016-5e24d8c350)

The 4.6.7 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 23 : kernel (2016-723350dd75)

The 4.6.7 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Linux Kernel - TCP Related Read Use-After-Free

// Source: https://marcograss.github.io/security/linux/2016/08/18/cve-2016-6828-linux-kernel-tcp-uaf.html // to build clang derp4.c -o derp4 -static include include include include include include ifndef SYSmmap define SYSmmap 9 endif ifndef SYSsocket define SYSsocket 41 endif ifndef SYSbind defi...

CVE-2015-6828

The CVE concerns WordPress SecureMoz Security Audit plugin

CVE-2014-6828

The CVE-2014-6828 entry concerns the Gulf Credit Union Fi_Mobile.Gulf Android app (version 1.1) that does not verify X.509 certificates when establishing SSL connections. This root cause enables man-in-the-middle attackers to spoof TLS servers and obtain sensitive information via a crafted certif...

CVE-2013-6828

CVE-2013-6828 : The connected sources confirm a remote authentication-bypass vulnerability in PineApp Mail-SeCure, where accessing the admin/management.html page allows bypassing authentication and performing a sys_usermng operation via the it parameter. Affected component: admin interface of Pin...

CVE-2008-6828

CVE-2008-6828 affects Symantec Altiris Deployment Solution (6.x) prior to 6.9.355 SP1. Affected component: Application Identity Account handling; root cause: the Application Identity Account password is stored in memory in cleartext, enabling a local attacker to glean credentials and gain privile...

CVE-2006-6828

CVE-2006-6828 describes multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier. The affected components are (1) default.asp (grup parameter) and (2) admin.asp (id parameter) or (3) admin.asp, allowing remote attackers to execute arbitrary SQL commands. The default.asp/grup vector i...