CVE-2014-9527

HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service infinite loop and deadlock via a crafted PPT file...

CVE-2014-8131

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service deadlock or segmentation fault and crash via a request to access...

PT-2015-4268

Name of the Vulnerable Software and Affected Versions Apache POI versions prior to 3.11 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and deadlock, by using a crafted PPT file. Recommendations For versions prior to 3.11, update to versio...

CVE-2014-9527: Undefined Security Weakness

HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service infinite loop and deadlock via a crafted PPT file...

CVE-2014-8131: Undefined Security Weakness

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service deadlock or segmentation fault and crash via a request to access...

openSUSE Security Update : libvirt (openSUSE-SU-2015:0008-1)

CVE-2014-8135: libvirt: local denial of service in storage driver 87b9437f-CVE-2014-8135.patch bsc910860 - CVE-2014-8136: libvirt: local denial of service in qemu driver 2bdcd29c-CVE-2014-8136.patch bsc910862 - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats...

PT-2015-4011

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.11 Description The issue arises from the qemu implementation of virConnectGetAllDomainStats in libvirt, which fails to handle locks correctly when a domain is skipped due to ACL restrictions. This allows remote...

OracleVM 3.3 : nss (OVMSA-2014-0023)

The remote OracleVM system is missing necessary patches to address critical security updates : nss - Added nss-vendor.patch to change vendor - Replace expired PayPal test certificate that breaks the build - Resolves: Bug 1145431 - CVE-2014-1568 - Resolves: Bug 1145431 - CVE-2014-1568 - Removed...

OracleVM 3.3 : nss (OVMSA-2014-0014)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Update some patches on account of the rebase - Resolves: Bug 1099619 - Backport nss-3.12.6 upstream fix required by Firefox 31 - Resolves: Bug 1099619 - Remov...

Oracle Linux 6 : libvirt (ELSA-2014-1873)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1873 advisory. - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk CVE-2014-3633 - domainconf: fix domain deadlock CVE-2014-3657 Tenable has...

libvirt: domain_conf: domain deadlock DoS

A denial of service flaw was found in the way libvirt's virConnectListAllDomains function computed the number of used domains. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to make any domain operations within libvirt unresponsive...

PT-2014-8548

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.1 through 10.0 Description The issue is related to incorrect library ordering when compiling OpenSSH with Kerberos support, leading to symbols being resolved incorrectly. This allows remote attackers to cause a denial of...

CVE-2014-8559

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...

DEBIAN-CVE-2014-8559

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...

Design/Logic Flaw

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...

CVE-2014-8559

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...

CVE-2014-8559

CVE-2014-8559 is tied to the Linux kernel up to version 3.17.2, where the d_walk function in fs/dcache.c fails to properly preserve the semantics of rename_lock. This can allow a local attacker to cause a denial of service via a deadlock and system hang. The connected advisories state that the is...

CVE-2014-8559

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...

PT-2014-8619

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.17.3 Description The issue is related to the d walk function in fs/dcache.c, which does not properly maintain the semantics of rename lock. This allows local users to cause a denial of service, resulting in a...

CVE-2014-8559

The dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a crafted application...