Ubuntu: Security Advisory (USN-2066-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux USN-2075-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN20751.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux USN-2075-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-2068-1)

Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event subsystem that allows normal users to enable function tracing. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from the kernel. CVE-2013-2930 Stephan Mueller reported an erro...

CVE-2013-5058

Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges via a crafted...

CVE-2013-3902

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 and Windows 7 SP1 on 64-bit platforms allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."...

Integer overflow

Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges via a crafted...

MS13-101: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2880430)

The remote Windows host has the following vulnerabilities : - Multiple errors exist in the Windows kernel-mode drivers that could allow privilege escalation and arbitrary code execution. CVE-2013-3899, CVE-2013-3902, CVE-2013-5058 - An error exists in the way the Windows kernel-mode driver parses...

CVE-2013-5058

CVE-2013-5058 is a Windows kernel win32k.sys integer overflow (RFONTOBJ::bTextExtent) vulnerability that can crash the kernel and may enable local privilege escalation. It affects multiple OS versions up to Windows Server 2012 R2; CoreLabs/Core advisory details describe a signed division overflow...

MS13-101: Description of the security update for Windows kernel-mode drivers: December 10, 2013

None None...

CVE-2013-6999

The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 SP2 does not properly validate the tagPROCESSINFO pW32Job field, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted...

HPSBPI02945 rev.2 - HP Officejet Pro 8500 (A909) All-in-One Printer, Cross-Site Scripting (XSS)

Potential Security Impact Cross-site scripting XSS VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP Officejet Pro 8500 A909 All-in-One Printer. The vulnerability could be exploited to allow cross-site scripting XSS. RESOLUTION HP has provided updated HP Officej...

Ubuntu Update for linux USN-2036-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN20361.nasl 8526 2018-01-25 06:57:37Z teissa $ Ubuntu Update for linux USN-2036-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Oracle Linux 5 / 6 : Unbreakable Enterprise Kernel (ELSA-2013-2585)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2585 advisory. - afkey: fix info leaks in notify messages Mathias Krause Orabug: 17837974 CVE-2013-2234 - drivers/cdrom/cdrom.c: use kzalloc for failing hardware...

CVE-2013-6383

The aaccompatioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAPSYSRAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call...

UBUNTU-CVE-2013-6381

Buffer overflow in the qethsnmpcommand function in drivers/s390/net/qethcoremain.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer...

CVE-2013-6383

The CVE-2013-6383 issue is real in the Linux kernel up to version 3.11.7: the aac_compat_ioctl function in drivers/scsi/aacraid/linit.c does not require CAP_SYS_RAWIO, allowing local users to bypass access restrictions via a crafted ioctl. Affected: Linux kernel prior to 3.11.8 (notably seen in a...

CVE-2013-6378

The lbsdebugfswrite function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service OOPS by leveraging root privileges for a zero-length write operation...

xorg-x11-server security and bug fix update

1.13.0-23 - Fix root window damage reports when Xinerama is active 919165 1.13.0-22 - Fix Xephyr crashes in 8 and 16 bit mode 1018405 1.13.0-21 - Fix Damage reports when Xinerama is active 919165 1.13.0-20 - Fix broken Xorg -configure 1016854 - CVE-2013-1940: Fix xf86FlushInput to drain evdev...

FreeBSD security vulnerabilities

Kernel memory leaks in different drivers...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt13

Nov. 24, 2013 Led 2.6.32-alt13 - 2.6.32-431.el6: + CVE-2013-0228 + CVE-2013-0268 + CVE-2013-0343 + CVE-2013-0349 + CVE-2013-0871 + CVE-2013-0913 + CVE-2013-1767 + CVE-2013-1773 + CVE-2013-1774 + CVE-2013-1792 + CVE-2013-1796 + CVE-2013-1797 + CVE-2013-1798 + CVE-2013-1826 + CVE-2013-1827 +...