MGASA-2018-0417 Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.78 and fixes at least the following security issues: An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the...

SUSE-SU-2018:1640-1 Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP3)

This update for the Linux Kernel 4.4.103-638 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Intel 6...

Input validation

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000110...

CVE-2017-13166

An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167...

USN-3468-3 linux-gcp vulnerabilities

It was discovered that the KVM subsystem in the Linux kernel did not properly bound guest IRQs. A local attacker in a guest VM could use this to cause a denial of service host system crash. CVE-2017-1000252 It was discovered that the Flash-Friendly File System f2fs implementation in the Linux...

App Layering/Unidesk: Blue Screen 0xA referencing unifltr.sys

End-user virtual machines and session hosts crash with a STOP 0xA blue screen referencing unifltr.sys. unifltr the the Unidesk and App Layering filter driver...

UBUNTU-CVE-2015-8943

drivers/video/msm/mdss/mdssmdputil.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 a...

SUSE-SU-2016:1038-1 Security update for Linux Kernel Live Patch 6

This update for the Linux Kernel 3.12.44-52.10.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. bsc967773 - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kerne...

USN-2751-1 linux-lts-vivid vulnerabilities

Benjamin Randazzo discovered an information leak in the md multiple device driver when the bitmapinfo.file is disabled. A local privileged attacker could use this to obtain sensitive information from the kernel. CVE-2015-5697 Marc-André Lureau discovered that the vhost driver did not properly...

USN-2745-1 qemu, qemu-kvm vulnerabilities

Lian Yihan discovered that QEMU incorrectly handled certain payload messages in the VNC display driver. A malicious guest could use this issue to cause the QEMU process to hang, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2015-5239 Qinghao...

DEBIAN-CVE-2014-6540

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.1.34, before 4.2.26, and before 4.3.14 allows local users to affect availability via vectors related to Graphics driver WDDM for Windows guests...

CVE-2010-0561

NetBSD kernels (versions 4.0, 5.0, and NetBSD-current before 2010-01-21) are affected by a local denial-of-service vulnerability caused by an integer signedness error in the audio subsystem. Specifically, passing a negative mixer index to azalia_query_devinfo (azalia.c) or hdaudio_afg_query_devin...

FreeBSD Security Advisory (FreeBSD-SA-06:25.kmem.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:25.kmem.asc ADV FreeBSD-SA-06:25.kmem.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Intel? Centrino Wireless Driver畸形帧远程代码执行漏洞

Intel 2200BG和2915ABG PRO/Wireless Network Connection Hardware是无线连接适配设备。 Windows操作系统下的Intel 2200BG和2915ABG PRO/Wireless Network Connection Hardware不正确处理畸形帧数据，远程攻击者可以利用漏洞以内核级权限执行任意指令，控制系统。 问题存在于w22n50.sys, w22n51.sys, w29n50.sys, w29n51.sys驱动中，目前没有详细漏洞细节提供。 Intel PROSet/Wireless 8, 9, 10 Intel...

[SECURITY] [DSA 516-1] New odbc-postgresql packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 516-1 [email protected] http://www.debian.org/security/ Martin Schulze June 7th, 2004 http://www.debian.org/security/faq -...