Security Bulletin: Vulnerabilities in DHCP affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in DHCP. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-5733 DESCRIPTION: ISC DHCP is vulnerable to a denial of service. By sending an overly large amount of packets, a remote attacker could overflow a reference...

Security Bulletin: A vulnerability in PHP affects PowerKVM

Summary PowerKVM is affected by a vulnerability in PHP. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7890 DESCRIPTION: libgd could allow a remote attacker to obtain sensitive information, caused by the lack of initialization for colorMap arrays in the GIF decodi...

Security Bulletin: A vulnerability in curl affects PowerKVM

Summary PowerKVM is affected by a vulnerability in curl. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-1000257 DESCRIPTION: cURL is vulnerable to a denial of service, caused by a buffer overread in the IMAP handler. By using a specially crafted IMAP FETCH respons...

Security Bulletin: Vulnerabilities in wget affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in wget. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-13090 DESCRIPTION: GNU wget is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the fdreadbody function in src/retr.c. By...

Security Bulletin: A vulnerability in nginx affects PowerKVM

Summary PowerKVM is affected by a vulnerability in nginx. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7529 DESCRIPTION: Nginx could allow a remote attacker to obtain sensitive information, caused by an integer overflow in Nginx range filter module. By sending...

Security Bulletin: A vulnerability in bluez affects PowerKVM

Summary PowerKVM is affected by a vulnerability in bluez. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-1000250 DESCRIPTION: BlueZ could allow a remote attacker to obtain sensitive information, caused by an error in the SDP server. By sending SDP request packets,...

Security Bulletin: A vulnerability in emacs affects PowerKVM

Summary PowerKVM is affected by a vulnerability in emacs. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-14482 DESCRIPTION: GNU Emacs could allow a remote attacker to execute arbitrary code on the system, caused by improper validation of user request. By sending a...

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux kernel . IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-12153 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference in the nl80211setrekeydata function i...

Security Bulletin: A vulnerability in ausgeas affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ausgeas. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7555 DESCRIPTION: Augeas is vulnerable to a heap-based buffer overflow. By sending specially crafted strings, a remote attacker could overflow a buffer and...

Security Bulletin: Vulnerabilities in Apache HTTPD affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Apache HTTPD. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-9788 DESCRIPTION: Apache HTTPD is vulnerable to a denial of service, caused by the failure to properly initialize memory used to process ''Digest''...

Security Bulletin: Vulnerabilities in PostgreSQL affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in PostgreSQL IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-7486 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to obtain sensitive information, caused by improper implementation of...

Security Bulletin: A vulnerability in Spice affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Spice. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7506 DESCRIPTION: spice is vulnerable to a denial of service, caused by an out-of-bounds write error when processing message. By sending specially-crafted...

Security Bulletin: A vulnerability in Ghostscript affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Ghostscript. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7207 DESCRIPTION: Artifex Software Ghostscript is vulnerable to a denial of service, caused by a NULL pointer dereference in the memgetbitsrectangle...

Security Bulletin: A vulnerability in Python affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Python. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2014-9365 DESCRIPTION: Python could allow a remote attacker to bypass security restrictions, caused by the failure to validate TLS certificate by the HTTP librarie...

Security Bulletin: A vulnerability in NSS affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Network Security Services NSS. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7502 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, is vulnerable to a denial of service, caused by a...

Security Bulletin: A vulnerability in ghostscript affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ghostscript. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-8291 DESCRIPTION: Artifex Ghostscript could allow a remote attacker to execute arbitrary commands on the system. By using .rsdparams type confusion with ...

Security Bulletin: Vulnerabilities in rabbitmq-server affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in rabbitmq-server. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8786 DESCRIPTION: RabbitMQ is vulnerable to a denial of service, caused by an error in the Management plugin. By sending a specially crafted...

Security Bulletin: Vulnerabilities in GStreamer affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GStreamer. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9634 DESCRIPTION: GStreamer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the flxdecodedeltafli function in...

Security Bulletin: Vulnerabilities in Spice affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Spice. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9577 DESCRIPTION: Spice is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by mainchannelallocmsgrcvbuf function. By sending...

Security Bulletin: Vulnerabilities in TigerVNC affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in TigerVNC. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2014-8240 DESCRIPTION: TigerVNC is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the MallocFrameBuffer function in vncviewer.c...