7291 matches found
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2333-1)
A bug was discovered in the handling of pathname components when used with an autofs direct mount. A local user could exploit this flaw to cause a denial of service system crash via an open system call. CVE-2014-0203 Toralf Forster reported an error in the Linux kernels syscall auditing on 32 bit...
Ubuntu 10.04 LTS : linux vulnerabilities (USN-2332-1)
A bug was discovered in the handling of pathname components when used with an autofs direct mount. A local user could exploit this flaw to cause a denial of service system crash via an open system call. CVE-2014-0203 Toralf Forster reported an error in the Linux kernels syscall auditing on 32 bit...
Ubuntu: Security Advisory (USN-2332-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2337-1: Linux kernel vulnerabilities
A flaw was discovered in the Linux kernel virtual machine's kvm validation of interrupt requests irq. A guest OS user could exploit this flaw to cause a denial of service host OS crash. CVE-2014-0155 Andy Lutomirski discovered a flaw in the authorization of netlink socket operations when a socket...
USN-2336-1: Linux kernel (Trusty HWE) vulnerabilities
A flaw was discovered in the Linux kernel virtual machine's kvm validation of interrupt requests irq. A guest OS user could exploit this flaw to cause a denial of service host OS crash. CVE-2014-0155 Andy Lutomirski discovered a flaw in the authorization of netlink socket operations when a socket...
USN-2334-1: Linux kernel vulnerabilities
An flaw was discovered in the Linux kernel's audit subsystem when auditing certain syscalls. A local attacker could exploit this flaw to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service OOPS. CVE-2014-3917 An information leak was discovered in the rdm...
USN-2333-1: Linux kernel (EC2) vulnerabilities
A bug was discovered in the handling of pathname components when used with an autofs direct mount. A local user could exploit this flaw to cause a denial of service system crash via an open system call. CVE-2014-0203 Toralf Förster reported an error in the Linux kernels syscall auditing on 32 bit...
USN-2332-1: Linux kernel vulnerabilities
A bug was discovered in the handling of pathname components when used with an autofs direct mount. A local user could exploit this flaw to cause a denial of service system crash via an open system call. CVE-2014-0203 Toralf Förster reported an error in the Linux kernels syscall auditing on 32 bit...
Kernel: filter: prevent nla extensions to peek beyond the end of the message
The 1 BPFSANCNLATTR and 2 BPFSANCNLATTRNEST extension implementations in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service integer underflow and...
CVE-2014-1359
Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...
CVE-2014-1359
CVE-2014-1359 affects Apple iOS < 7.1.2, OS X < 10.9.4, and Apple TV
tcpdump Print-bgp.C Remote Integer Underflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24965/info The 'tcpdump' utility is prone to an integer-underflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. An attacker can exploit th...
File(1) <= 4.13 Command File_PrintF Integer Underflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23021/info The file1 command is prone to an integer-underflow vulnerability because the command fails to adequately handle user-supplied data. An attacker can leverage this issue to corrupt heap memory and execute arbitra...
FreeType TTF File Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18326/info FreeType is prone to a buffer-overflow vulnerability. This issue is due to an integer-underflow that results in a buffer being overrun with attacker-supplied data. This issue allows remote attackers to execute...
PT-2014-4139
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Apple OS X versions prior to 10.9.4 Apple TV versions prior to 6.1.2 Description The issue is caused by an integer underflow in launchd, which allows attackers to execute arbitrary code via a crafted...
CVE-2014-1359: Undefined Security Weakness
Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...
Linux Kernel 2.6.x IPTables Logging Rules Integer Underflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11488/info It is reported that an integer underflow vulnerability is present in the iptables logging rules of the Linux kernel 2.6 branch. A remote attacker may exploit this vulnerability to crash a computer that is runni...
Kernel: filter: prevent nla extensions to peek beyond the end of the message
The 1 BPFSANCNLATTR and 2 BPFSANCNLATTRNEST extension implementations in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service integer underflow and...
openSUSE Security Update : pixman (openSUSE-SU-2014:0011-1)
Added pixman-bnc853824-bfo67484-CVE-2013-6425-fix-underflow.pa tch for bnc853824. Fixes an integer underflow bug which can cause a crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : flash-player (openSUSE-SU-2014:0197-1)
Flash Player received an out of band critical security update to fix an integer underflow vulnerability that could be exploited to execute arbitrary code on the affected system CVE-2014-0497. More information can be found on: http://helpx.adobe.com/security/products/flash-player/apsb14-04.html...