13897 matches found
SUSE SLES11 Security Update : xen (SUSE-SU-2017:2450-1)
This update for xen fixes several issues. These security issues were fixed : - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information XSA-226, bsc1051787. - CVE-2017-12137: Incorrectly-aligned updates...
bluez: Out-of-bounds heap read in service_search_attr_req function
An information-disclosure flaw was found in the bluetoothd implementation of the Service Discovery Protocol SDP. A specially crafted Bluetooth device could, without prior pairing or user interaction, retrieve portions of the bluetoothd process memory, including potentially sensitive information...
DEBIAN-CVE-2017-1000250
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests...
ALPINE-CVE-2017-1000250
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests...
CVE-2017-14317
A domain cleanup issue was discovered in the C xenstore daemon aka cxenstored in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it including domain...
ALPINE-CVE-2017-14317
A domain cleanup issue was discovered in the C xenstore daemon aka cxenstored in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it including domain...
CVE-2017-14317
CVE-2017-14317 affects the Xen project’s xenstored (cxenstored) through Xen 4.9.x. A race during domain cleanup of a stubdomain can cause a double-free in cxenstored, crashing the daemon and causing DoS of xenstored-dependent operations (domain create/destroy, ballooning, device changes, etc.). R...
UBUNTU-CVE-2017-1000250
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests...
cxenstored: Race in domain cleanup
ISSUE DESCRIPTION When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. IMPACT The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it including domain creation / destruction, ballooning, device changes, etc. VULNERABLE SYSTEM...
The vulnerability of the Crypto-NAK packages, the demon program ntpd, the Network Time Protocol NTP, allows a perpetrator to bypass the authentication process.
The vulnerability of the Crypto-NAK packages, the demon program ntpd, and the Network Time Protocol NTP are related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures...
Code injection
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service daemon crash or execute arbitrary code...
CVE-2015-3991
CVE-2015-3991 affects strongSwan versions 5.2.2 and 5.3.0, enabling a remote attacker to cause a daemon crash (DoS) or execute arbitrary code. Public references across OSV, NVD, Debian/CVEs corroborate the issue. Fedora advisory notes a later update (5.3.2) fixes this CVE; other entries (openSUSE...
Intel ConnMan Project connection manager daemon buffer overflow vulnerability
Intel ConnMan Project connection manager daemon is an Internet connection manager from Intel Corporation USA for managing Internet connections in embedded devices. A buffer overflow vulnerability exists in Intel ConnMan Project connection manager daemon version 1.34 and earlier. A remote attacker...
[SECURITY] Fedora 27 Update: xen-4.9.0-9.fc27
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 26 Update: xen-4.8.1-8.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
SUSE-SU-2017:2319-1 Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information XSA-226, bsc1051787. - CVE-2017-12137: Incorrectly-aligned updates ...
CVE-2017-1000201
A NULL pointer dereference flaw was found in the UnregisterHandler method implemented in the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could call UnregisterHandler method with non-existing tcmu handler as paramater to trigger DoS...
SUSE SLES12 Security Update : quagga (SUSE-SU-2017:2294-1)
This update provides Quagga 1.1.1, which brings several fixes and enhancements. Security issues fixed : - CVE-2017-5495: Telnet 'vty' interface DoS due to unbounded memory allocation. bsc1021669 - CVE-2016-1245: Stack overrun in IPv6 RA receive code. bsc1005258 Bug fixes : - Do not enable zebra's...
glibc, nscd security update
CentOS Errata and Security Advisory CESA-2017:1916 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...