CentOS 5 : kernel (CESA-2012:1323)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

kernel security update

CentOS Errata and Security Advisory CESA-2012:1323 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2012:1304 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...

Scientific Linux Security Update : ibutils on SL5.x i386/x86_64 (20120221)

The ibutils packages provide InfiniBand network and path diagnostics. It was found that the ibmssh executable had an insecure relative RPATH runtime library search path set in the ELF Executable and Linking Format header. A local user able to convince another user to run ibmssh in an...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

This update fixes the following security issues : - A flaw was found in the sctpicmpprotounreachable function in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could use this flaw to cause a denial of service. CVE-2010-4526, Important - A missing...

Oracle Linux 6 kernel security, bug fix and enhancement update

2.6.32-279.el6 - netdrv mlx4: ignore old module parameters Jay Fenlason 830553 2.6.32-278.el6 - kernel sysctl: silence warning about missing strategy for file-max at boot time Jeff Layton 803431 - net sunrpc: make new tcpmaxslottableentries sysctl use CTLUNNUMBERED Jeff Layton 803431 - drm i915:...

Design/Logic Flaw

The Reliable Datagram Sockets RDS subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service BUGON and system crash via vectors involving 1 a loopback aka loop transmit operation or 2 an InfiniBand aka ib...

kernel: rds-ping cause kernel panic

The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service BUGON and kernel panic by establishing an RDS connection with the source IP address equal to the IPoIB...

kernel security and bug fix update

2.6.32-220.23.1.el6 - net bond: Make LRO flag follow slave settings Neil Horman 831176 794647 2.6.32-220.22.1.el6 - net ipv4/netfilter: TCP and raw fix for iproutemeharder Jiri Benc 824429 812108 2.6.32-220.21.1.el6 - security fix compile error in commoncap.c Eric Paris 806725 806726 CVE-2012-212...

UBUNTU-CVE-2012-2372

The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service BUGON and kernel panic by establishing an RDS connection with the source IP address equal to the IPoIB...

Wireshark Heap Based BOF and Denial of Service Vulnerabilities - Mac OS X

Wireshark is prone to heap based buffer overflow and denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Exadata Infiniband Switch security vulnerabilities

Default accounts, /conf/shadow file weak permissions...

Oracle Exadata Infiniband Switch default logins and world readable shadow file

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Bugtraq List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both data...

Oracle Exadata Infiniband Switch Default Logins / Poor Configuration

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Full-Disclosure List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both da...

sos security, bug fix, and enhancement update

1.7-9.62.0.1.el5 - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile 1.7-9.62 - Always log plugin exceptions that are not raised to the interpreter Resolves: bz717480 - Ensure relative...

Low: Red Hat Security Advisory: ibutils security and bug fix update

Updated ibutils packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

RedHat Update for ibutils RHSA-2012:0311-03

Check for the Version of ibutils OpenVAS Vulnerability Test RedHat Update for ibutils RHSA-2012:0311-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

sos security, bug fix, and enhancement update

2.2-17.0.1.el6 - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 - Allow '-' in ticket SR numbers John Haxby - Disable --upload option as it will not work with Oracle support - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 - Remove ...

Wireshark Heap Based BOF and Denial of Service Vulnerabilities (Windows)

The host is installed with Wireshark and is prone to heap based buffer overflow and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkbofndosvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $ Wireshark Heap Based BOF and Denial of Service Vulnerabilities Windows Authors:...

Null pointer dereference

The dissectinfinibandcommon function in epan/dissectors/packet-infiniband.c in the Infiniband dissector in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed packet...