RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.4.18 (RHSA-2017:3217)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:3217 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red Hat JBos...

Huawei Enjoy 6 MTK Platform Arbitrary Memory Access Vulnerability (CNVD-2017-34227)

The Huawei Enjoy 6 is a smartphone from the Chinese company Huawei Huawei. The Huawei Enjoy 6 MTK platform suffers from an arbitrary memory access vulnerability, which can be used by attackers to trick users into installing malicious apps, which can be exploited to send specific parameters leadin...

RHEL 6 : kernel (RHSA-2017:3200)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3200 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A race condition issue leading to a...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3640)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3640 advisory. - selinux: fix off-by-one in setprocattr Stephen Smalley Orabug: 27001717 CVE-2017-2618 CVE-2017-2618 CVE-2017-2618 - sysctl: Drop reference added ...

Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update C)

CVSS v3 6.8 Vendor: Siemens Equipment: SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products Vulnerabilities: Security Features UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-17-318-01B Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products that was...

RHEL 6 : httpd (RHSA-2017:3195)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3195 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: It was discovered that...

[SECURITY] Fedora 27 Update: lucene-6.1.0-6.fc27

Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform...

[SECURITY] Fedora 27 Update: curl-7.55.1-6.fc27

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Immunity Canvas: JBOSS6_JMXINVOKERSERVLET_DESERIALIZE

Name| jboss6jmxinvokerservletdeserialize ---|--- CVE| CVE-2015-7501 Exploit Pack| CANVAS Description| jboss6jmxinvokerservletdeserialize Notes| CVE Name: CVE-2015-7501 VENDOR: Red Hat NOTES: IMPORTANT NOTE: Any instance of this application running Apache Commons Collections version prior to 3.0...

CVE-2017-15085

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15086

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

Code injection

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

Code injection

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

Code injection

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15086

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15085

CVE-2017-15085 notes that the fix for CVE-2017-12150 was not properly shipped in RHSA-2017:3110 for Red Hat Gluster Storage 3.3 on RHEL 6. The connected advisories confirm CVE-2017-12150, CVE-2017-12151, and CVE-2017-12163 relate to Samba security fixes (SMB signing, DFS/SMB2 encryption handling,...

CVE-2017-15087

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15086

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6...

CVE-2017-15087

CVE-2017-15087 is a descriptor indicating that the fix for CVE-2017-12163 was not properly shipped in the erratum RHSA-2017:3110 for Red Hat Gluster Storage 3.3 on RHEL 6. Connected records show CVE-2017-12163 concerns an SMB1 information-leak in Samba, but there are no additional technical detai...

CVE-2017-15086

CVE-2017-15086 notes that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:3110 for Red Hat Gluster Storage 3.3 on RHEL 6. The connected CVE-2017-12151 entry describes a MITM risk due to SMB signing/encryption handling in Samba (e.g., DFS redirects and libsmbclient usage)....