openSUSE Security Update : the Linux Kernel (openSUSE-2017-246)

The openSUSE Leap 42.1 kernel to 4.1.38 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-7117: Use-after-free vulnerability in the sysrecvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors...

openSUSE: Security Advisory for kernel (openSUSE-SU-2017:0458-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:0181-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.38 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removin...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-1426)

The openSUSE Leap 42.2 kernel was updated to 4.4.36 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.36 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended...

CVE-2016-7917

The nfnetlinkrcvbatch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, which allows local users to obtain sensitive information from kernel memory or cause a denial of service infinite loop or out-of-bounds...

CVE-2016-7917

CVE-2016-7917 affects the Linux kernel’s netfilter: the nfnetlink_rcv_batch() function in net/netfilter/nfnetlink.c does not validate the batch length against the message, enabling a local user with CAP_NET_ADMIN to read kernel memory or trigger a denial of service (infinite loop or out-of-bounds...

CVE-2016-7917

The nfnetlinkrcvbatch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, which allows local users to obtain sensitive information from kernel memory or cause a denial of service infinite loop or out-of-bounds...

CVE-2015-7917

CVE-2015-7917 affects OPC Systems.NET (Open Automation Software) prior to and including 8.00.0023, caused by Untrusted Search Path/DLL Hijacking. Local users can privilege/escalate by placing a Trojan DLL in a vulnerable directory; exploitation requires local access and user interaction to load t...

CVE-2014-7917

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615...

CVE-2014-7917

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615...

CVE-2014-7917

CVE-2014-7917 concerns Android libstagefright’s SampleTable.cpp where an integer overflow exists in the MP4 processing path. Affected software: Android before version 5.0.0, referencing internal bug 15342615. The description notes unspecified impact and attack vectors. There is no explicit remedi...

Open Automation Software OPC Systems NET DLL Hijacking Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a DLL Hijacking vulnerability in Open Automation Software’s OPC Systems.NET application. Open Automation Software has reviewed the vulnerability and determined not to patch the issue at this time. This vulnerability could be exploited remote...

ManageEngine SupportCenter Plus < 7.9 Build 7917 attach Parameter Directory Traversal

The remote host is running a version of ManageEngine SupportCenter Plus prior to version 7.9 build 7917. It is, therefore, affected by a directory traversal vulnerability related to 'WorkOrder.do' and attachments that could allow an attacker to download sensitive files. %NASLMINLEVEL 70300 C...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 7850 / 7917)

Adobe flash-player has been updated to the 11.2.202.291 security update which fixes security issues bnc824512, CVE-2013-3343, APSB13-16. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...