F5 Networks BIG-IP : TMM vulnerability (K19430431)

A remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers using a Policy Enforcement profile or a Web Acceleration profile. CVE-2017-6160 Impact The Traffic...

F5 Networks BIG-IP : Linux kernel vulnerability (K81211720)

The tcpspliceread function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service infinite loop and soft lockup via vectors involving a TCP packet with the URG flag. CVE-2017-6214 C Tenable Network Security, Inc. The descriptive text and package...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2017-35198)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. Denial of service vulnerability in multiple F5 products. An attacker can exploit this vulnerability to cause a denial of service...

libjpeg-turbo null pointer dereference vulnerability

libjpeg-turbo is a JPEG image codec that uses SIMD instructions MMX, SSE2, AVX2, NEON, AltiVec to accelerate baseline JPEG compression and decompression on x86, x86-64, ARM and PowerPC systems. A null pointer dereference vulnerability exists in libjpeg-turbo, which can be exploited to cause a nul...

openSUSE Security Update : xorg-x11-server (openSUSE-2017-826)

This update for xorg-x11-server fixes the following issues : - Improve retrieval of entropy for generating random authentication cookies bsc1025084 - Fix rendering with glamor acceleration. bsc1047154 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Fedora 26 : webkitgtk4 (2017-dfaf0ca892)

Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...

Weak Password Vulnerability in AppEx CRE Smart Acceleration Gateway

AppEx is a full line of application delivery, WAN acceleration, and Internet acceleration hardware and software products. A weak password vulnerability exists in AppEx CRE Smart Acceleration Gateway. An attacker is allowed to log in to the system backend using the default weak password to gain...

[SECURITY] Fedora 26 Update: gstreamer1-vaapi-1.12.0-1.fc26

A collection of GStreamer plugins to let you make use of VA API video acceleration from GStreamer applications. Includes elements for video decoding, display, encoding and post-processing using VA API subject to hardware limitations...

CVE-2017-8284

The disasinsn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction size, which allows local users to gain privileges by creating a modified basic block that injects code into a setuid program, as demonstrated...

Code injection

DISPUTED The disasinsn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction size, which allows local users to gain privileges by creating a modified basic block that injects code into a setuid program, as...

CVE-2017-8284

CVE-2017-8284 affects QEMU prior to 2.9.0. The vulnerable component is the disas_insn function in target/i386/translate.c, which in TCG mode without hardware acceleration does not limit instruction size. This can enable a local user to gain privileges by creating a modified basic block that injec...

The 'Audience of You' at NAB

It's all about the "audience of you" as Akamai gears up for next week's 2017 NAB Show in Las Vegas. With that phrase, we're talking about helping to deliver the best possible experiences for each and every OTT video viewer. It's not an easy thing to do, but we're demonstrating a host of new...

Fedora 24 : webkitgtk4 (2017-0f38995622)

Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...

Fedora 25 : webkitgtk4 (2017-25ffd5b236)

Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...

Media Acceleration Enhances Online Experiences for OTT Video, Games and Software Downloads

Online audiences are growing and so are their expectations for the quality of experience. You know exactly what I mean if you've ever been frustrated with the rate at which a game is downloading or if your video stalls at the most inopportune time. Online streaming is no longer novel, it's the...

Code injection

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives,...

Intel PSET Application Install wrapper contains an escalation of privilege vulnerability.

Summary: Intel PSET Application Install wrapper contains an escalation of privilege vulnerability. Description: Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer a...

OPENSUSE-SU-2017:0565-1 Security update of chromium

Google chromium was updated to 56.0.2924.87: Various small fixes Disabled option to enable/disable plugins in the chrome://plugins - Changed the build requirement of libavformat to library version 57.41.100, as included in ffmpeg 3.1.1, as only this version properly supports the public AVStream A...

PT-2017-4109 · Qemu +1 · Qemu +1

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 2.9.0 Description: The issue is related to the disas insn function in target/i386/translate.c of the QEMU emulator, which does not limit the instruction size when TCG mode without hardware acceleration is used. This...

Security update for MozillaFirefox (important)

This update for MozillaFirefox to version 51.0.1 fixes security issues and bugs. These security issues were fixed: CVE-2017-5375: Excessive JIT code allocation allows bypass of ASLR and DEP bmo1325200, boo1021814 CVE-2017-5376: Use-after-free in XSL bmo1311687, boo1021817 CVE-2017-5377: Memory...