79 matches found
Ubuntu: Security Advisory (USN-3161-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3162-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3162-1: Linux kernel vulnerabilities
CAI Qian discovered that shared bind mounts in a mount namespace exponentially added entries without restriction to the Linux kernel's mount table. A local attacker could use this to cause a denial of service system crash. CVE-2016-6213 It was discovered that the KVM implementation for x86/x8664 ...
USN-3161-3: Linux kernel (Raspberry Pi 2) vulnerabilities
Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to expose sensitive information kernel memory. CVE-2015-8964 It was discovered that the Video For Linux Two v4l2 implementation in the Linux kernel d...
Amazon Linux AMI : kernel (ALAS-2016-772)
CVE-2016-8645 kernel: a BUG statement can be hit in net/ipv4/tcpinput.c It was discovered that the Linux kernel since 3.6-rc1 with net.ipv4.tcpfastopen; set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash. CVE-2016-86...
Fedora Update for kernel FEDORA-2016-3548475bca
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-8645
CVE-2016-8645 : Linux kernel TCP stack mishandles skb truncation, enabling a local attacker to crash the system (DoS) via crafted sendto calls. Affected: kernels prior to 4.8.10. Remediation: upgrade to the fixed kernel (e.g., 4.8.10+; see changelogs/OS advisories).
Fedora 24 : kernel (2016-3548475bca)
The 4.8.8 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
CVE-2016-8645
It was discovered that the Linux kernel since 3.6-rc1 with 'net.ipv4.tcpfastopen' set to 1 can hit BUG statement in tcpcollapse function after making a number of certain syscalls leading to a possible system crash...
openSUSE Security Update : flash-player (openSUSE-2015-975)
This update for flash-player fixes the following issues : - Security update to 11.2.202.559 boo960317 : - APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644,...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
Adobe AIR <= 20.0.0.204 Multiple Vulnerabilities (APSB16-01)
The version of Adobe AIR installed on the remote Windows host is equal or prior to version 20.0.0.204. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that a remote attacker can exploit to execute arbitrary code. CVE-2015-8644 - An integer overflow conditi...
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt58
3:11-alt58 built Dec. 29, 2015 Sergey V Turchin in task 155487 Dec. 29, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643,...
Adobe Flash Player Multiple Vulnerabilities -01 (Dec 2015) - Windows
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
CVE-2015-8645
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code or cause a denial o...
CVE-2015-8645
Adobe Flash Player and Adobe AIR (and related SDK components) are affected by CVE-2015-8645 due to memory corruption from unspecified vectors, enabling arbitrary code execution or memory corruption/DoS. Affected versions: Flash Player before 18.0.0.324 and 19.x and before 20.0.0.267 on Windows/OS...
KLA10727 Code execution vulnerabilities in Adobe Flash Player and AIR
Type confusion, integer overflow, use-after-free and memory corruption vulnerabilities were found in Adobe products. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via an unknown vectors...
flash -- multiple vulnerabilities
Adobe reports: These updates resolve a type confusion vulnerability that could lead to code execution CVE-2015-8644. These updates resolve an integer overflow vulnerability that could lead to code execution CVE-2015-8651. These updates resolve use-after-free vulnerabilities that could lead to cod...
