Unbreakable Enterprise kernel security update

4.1.12-124.14.2 - scsi: iscsitcp: set BDICAPSTABLEWRITES when data digest enabled Jianchao Wang Orabug: 27726302 - block: fix biowillgap for first bvec with offset Ming Lei Orabug: 27775588 - block: relax check on sg gap Ming Lei Orabug: 27775588 - block: don't optimize for non-cloned bio in...

Security Advisory - Sensitive Information Leak Vulnerability in Some Huawei Smart Phones

There is a sensitive information leak vulnerability in the CMA implementation of some Huawei smart phones. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak. Vulnerability ID:...

UBUNTU-CVE-2014-2739

The cmareqhandler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet aka RoCE address that is properly resolved within a different module, which allows remote attackers to cause a denial of service incorrect...

PT-2014-4895 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.14.x through 3.14.1 Description: The issue is related to the cma req handler function in the Linux kernel, which attempts to resolve an RDMA over Converged Ethernet RoCE address. This can be exploited by remote attacke...

Linux Kernel随机内存指针间接引用拒绝服务漏洞

Bugtraq ID:66775 CVE ID:CVE-2014-2739 Linux Kernel是Linux操作系统的内核。 Linux kernel的cma req处理程序在解析passive端RoC3 L2地址时存在错误，成功利用后可导致IB/core崩溃，造成拒绝服务。 0 Linux kernel 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.kernel.org/...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.21.1 - SPEC: v2.6.39-400.21.1 Maxim Uvarov - xen/mmu: On early bootup, flush the TLB when changing RO-RW bits Xen provided pagetables. Konrad Rzeszutek Wilk 2.6.39-400.20.1 - SPEC: v2.6.39-400.20.1 Maxim Uvarov - PCI: Set device power state to PCID0 for device without native PM support...

SuSE 10 Security Update : ofed (ZYPP Patch Number 8386)

This update of ofed fixed multiple issues including security related flaws : - sdp: move histogram allocation from stack to heap. bnc706175 - cma: Fix crash in request handlers. bnc678795, CVE-2011-0695 - rds: set correct msgnamelen. bnc773383, CVE-2012-3430 - cm: Bump reference count on cmid...

CVE-2009-5115

McAfee Common Management Agent CMA 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object...

CVE-2009-5115

CVE-2009-5115 affects McAfee CMA 3.5.5 (3.5.5.588) and 3.6.0 (3.6.0.608), and McAfee Agent 4.0 prior to Patch 3. An authenticated remote attacker could overwrite arbitrary files by accessing a report-writing ActiveX control COM object. Remediation: apply Patch 3 for McAfee Agent 4.0 (and correspo...

kernel: panic in ib_cm:cm_work_handler

Race condition in the cmworkhandler function in the InfiniBand driver drivers/infiniband/core/cma.c in Linux kernel 2.6.x allows remote attackers to cause a denial of service panic by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.28.11.el6 - fs/partitions: Validate mapcount in Mac partition tables CVE-2011-1010 - nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab v3 CVE-2011-1090 2.6.32-100.28.10.el6 - Use cciss for some Smart Array controller for OL5 orabug 11899706 - CVEs from...

Security feature bypass

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

FrameworkService.exe in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator ePO and ProtectionPilot PrP, allows remote attackers to corrupt memory and cause a denial of service CMA Framework service crash via a long invalid method in requests for the...

CVE-2008-1855

CVE-2008-1855 affects McAfee Common Management Agent (CMA) FrameworkService.exe in CMA 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot. The vulnerability allows an unauthenticated, remote attacker to trigger a memory corruption in CMA FrameworkService via ...

CVE-2008-1357

CVE-2008-1357 affects McAfee CMA 3.6.0.574 (Patch 3) and earlier, used with ePolicy Orchestrator 4.0.0 build 1015. The vulnerability is in the logDetail function of applib.dll and stems from a format string issue in the UDP AgentWakeup handling (port 8082) that can leak into the format string spe...

McAfee Common Management Agent (CMA)多个内存破坏漏洞

McAfee Common Management Agent是一款安全管理客户端工具，帮助简化网管的防病毒管理任务。 McAfee Common Management Agent存在多个内存破坏问题，远程攻击者可以利用漏洞以系统进程权限执行任意指令。 漏洞包括如下： -不正确的边界检查可引起整数下溢，攻击者可以利用漏洞在系统上执行任意代码。 -发送特殊构建的报文会由于不正确的边界检查而造成基于堆栈的缓冲区溢出。 -发送特殊构建的报文会由于不正确的边界检查而造成基于堆的溢出，可导致任意代码执行。 -不正确的边界检查可引起整数溢出，攻击者可以利用漏洞在系统上执行任意代码。 0 McAfee...

McAfee Common Management Agent Traversal Arbitrary File Write

According to its banner, the McAfee Common Management Agent CMA running on the remote host is affected by a directory traversal vulnerability in the Framework Service component due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a special...