RedHat Update for kernel RHSA-2017:1842-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : kernel (RHSA-2017:1842)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1842 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An use-after-free flaw was found in t...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:1360-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.74 to receive various security and bugfixes. Notable new/improved features : - Improved support for Hyper-V - Support for the tcpwestwood TCP scheduling algorithm The following security bugs were fixed : - CVE-2017-8106: The handleinvept...

Debian DLA-922-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or have other impacts. CVE-2016-2188 Ralf Spenneberg of OpenSource Security reported that the iowarrior device driver did not sufficiently validate USB descriptors. This...

[SECURITY] [DLA 922-1] linux security update

Package : linux Version : 3.2.88-1 CVE ID : CVE-2016-2188 CVE-2016-9604 CVE-2016-10200 CVE-2017-2647 CVE-2017-2671 CVE-2017-5967 CVE-2017-5970 CVE-2017-6951 CVE-2017-7184 CVE-2017-7261 CVE-2017-7273 CVE-2017-7294 CVE-2017-7308 CVE-2017-7472 CVE-2017-7616 CVE-2017-7618 Several vulnerabilities have...

CVE-2017-6951

The keyringsearchaux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service NULL pointer dereference and OOPS via a requestkey system call for the "dead" type...

DEBIAN-CVE-2017-6951

The keyringsearchaux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service NULL pointer dereference and OOPS via a requestkey system call for the "dead" type...

CVE-2017-6951

CVE-2017-6951 : A local denial-of-service in the Linux kernel is caused by a NULL pointer dereference in keyring_search_aux in security/keys/keyring.c when a request_key is used on the dead type. Exploitation could crash the system (OOPS). Affected: Linux kernel up to 3.14.79; impact is local, wi...

CVE-2017-6951

The keyringsearchaux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of service NULL pointer dereference and OOPS via a requestkey system call for the "dead" type...

CVE-2016-6951

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-6951

Technical details about CVE-2016-6951 (affected software, root cause, impact, vulnerable versions, or fixes) are not provided in the connected documents. Monitor for updates from official advisories and security bulletins.

CVE-2014-6951

The OneFile Ignite (uk.co.onefile.ignite) Android app, version 1.19, does not verify X.509 certificates from SSL servers, per CVE-2014-6951. This leads to MITM possible to spoof servers and exfiltrate data. Public records (NVD, CVE listings) confirm the vulnerability and its impact (partial confi...

CVE-2013-6951

The CVE-2013-6951 entry concerns Belkin Wemo Home Automation firmware prior to version 3949, which does not maintain a local set of CA public keys. This flaw enables man-in-the-middle attackers to spoof SSL servers by presenting arbitrary X.509 certificates, compromising SSL/TLS integrity for aff...

CVE-2008-6951

MauryCMS

CVE-2006-6951

CVE-2006-6951 describes a cross-site scripting (XSS) flaw in OdysseusBlog’s blog.php, exploitable by supplying a crafted value for the page parameter. Remote attackers could inject arbitrary script/HTML when the affected page is viewed, as reported in the connected documents. The sources confirm ...