Debian DLA-1862-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2019-2101 Andrey Konovalov discovered that the USB Video Class driver uvcvideo did not consistently handle a type field in device descriptors, whic...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1486)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was found that the parserockridgeinodeinternal function of the Linux kernel's ISOFS implementation did not correctl...

openSUSE Security Update : the Linux Kernel (openSUSE-2019-618) (Foreshadow)

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-10853: A flaw was found in KVM in which certain instructions such as sgdt/sidt call segmentedwritestd doesn't propagate access correctly. As such, during userspa...

PT-2018-8693

Name of the Vulnerable Software and Affected Versions: Cisco Aggregation Services Router ASR 5700 Series devices and Virtualized Packet Core VPC System Software affected versions not specified Description: A vulnerability in the egress packet processing functionality could allow an unauthenticate...

CVE-2017-16912

The "getpipe" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service out-of-bounds read via a specially crafted USB over IP packet...

CVE-2017-16914

The vulnerability CVE-2017-16914 affects the Linux kernel’s USB/IP path: the stub_send_ret_submit() function in drivers/usb/usbip/stub_tx.c is vulnerable in kernel versions before 4.14.8, 4.9.71, 4.1.49, and 4.4.107. A specially crafted USB over IP packet can trigger a NULL pointer dereference, l...

CVE-2017-16912

The "getpipe" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service out-of-bounds read via a specially crafted USB over IP packet...

CVE-2017-17901: Uncontrolled Resource Consumption

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

Race condition

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to...

Cisco IOS Software for Cisco Aironet Access Points Information Disclosure Vulnerability

A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to...

Code injection

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service guest crash via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options...

CVE-2015-3215

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service guest crash via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options...

CVE-2015-3215

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service guest crash via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options...

CVE-2015-3215

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service guest crash via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options...

CVE-2015-3215

The CVE-2015-3215 issue affects the NetKVM Windows Virtio driver (virtio-win). The root cause is a crafted IP packet length value that does not account for IP options, allowing remote attackers to cause a denial of service (guest crash). Affected component/file: NetKVM/virtio-win traffic handling...

CVE-2015-3215: Improper Input Validation

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service guest crash via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options...

CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...

Integer overflow

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...

CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...

CVE-2016-10377

In Open vSwitch OvS 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in lib/flow.c in the function miniflowextract, permitting remote bypass of the access control list enforced by the switch...