CentOS 6 : autofs (CESA-2015:1344)

Updated autofs packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

autofs security update

CentOS Errata and Security Advisory CESA-2015:1344 Updated autofs packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS...

[SECURITY] Fedora 22 Update: hostapd-2.4-3.fc22

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground a nd acts as the backe...

RHEL 6 : ntp (RHSA-2015:1459)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1459 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's...

netcf: augeas path expression injection via interface name

A denial of service flaw was found in netcf. A specially crafted interface name could cause an application using netcf such as the libvirt daemon to crash...

Moderate: Red Hat Security Advisory: ntp security, bug fix, and enhancement update

Updated ntp packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

freeradius: stack-based buffer overflow flaw in rlm_pap module

A stack-based buffer overflow was found in the way the FreeRADIUS rlmpap module handled long password hashes. An attacker able to make radiusd process a malformed password hash could cause the daemon to crash...

Design/Logic Flaw

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash by leveraging an unspecified scalar function in a SQL statement...

CVE-2015-0157

IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service daemon crash by leveraging an unspecified scalar function in a SQL statement...

CVE-2015-0157

CVE-2015-0157 affects IBM DB2 LUW and InfoSphere BigInsights; a remote authenticated DB2 user can crash the server by sending a crafted SQL using scalar functions (ROUND/TRUNCATE). CVSS base 6.8. Affected: DB2 LUW 9.7/9.8/10.1/10.5 lines; BigInsights’ Big SQL includes DB2 components. Remediation:...

Juniper Networks Junos SRX Series SRX Network Security Daemon Denial of Service Vulnerability

Juniper Networks SRX Series services gateways with Junos are Juniper Networks' SRX Series gateway devices running the Junos operating system.The SRX Network Security Daemon nsd is SRX Network Security Daemon nsd is one of the network security daemons. A security vulnerability exists in the SRX ns...

Code injection

The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...

Juniper Junos SRX Series Network Security Daemon DoS (JSA10692)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the network security daemon nsd due to a flaw that occurs when handling DNS response messages for name resolution requests. An attacker can exploit this, via a rogue...

CVE-2015-5362

The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before...

Code injection

The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.1X50 before 14.1X50-D85, 14.1X55 before 14.1X55-D20, 14.2 before...

CVE-2015-5362

The CVE-2015-5362 issue affects Juniper Junos OS where the BFD daemon (bfdd) can be reached remotely to trigger a crash/restart or arbitrary code execution via a crafted BFD packet. Affected versions span multiple releases across 12.1X44–15.1X49, including 12.1X44 before 12.1X44-D50, 12.1X46 befo...

Juniper Networks Junos OS SRX NSD Denial of Service Vulnerability

Junos OS is prone to a DoS vulnerability in the Network Security Daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS IPv6 sendd DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability in the SEND daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS BFD Crash Vulnerability

Junos OS is prone to a vulnerability in BFD daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if descriptio...

Scientific Linux Security Update : php on SL6.x i386/x86_64 (20150709)

A flaw was found in the way PHP parsed multipart HTTP POST requests. A specially crafted request could cause PHP to use an excessive amount of CPU time. CVE-2015-4024 An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP...