CentOS 5 : krb5 (CESA-2008:0164)

Updated krb5 packages that resolve several issues and fix multiple bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and serve...

kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

Design/Logic Flaw

The dommappgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service OOPS via an application that attempts to allocate a large amount of memory...

CVE-2009-3888

The dommappgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service OOPS via an application that attempts to allocate a large amount of memory...

CVE-2009-3888

CVE-2009-3888 affects the Linux kernel up to version 2.6.31.5; the vulnerability is in do_mmap_pgoff in mm/nommu.c when an MMU is absent. Local users can trigger a denial of service (OOPS) by allocating a large amount of memory. A patch released in 2.6.31.6 fixes the issue; updating to 2.6.31.6 o...

kernel: flood ping cause out-of-iommu error and panic when mtu larger than 1500

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service IOMMU space exhaustion and system crash by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping...

USN-853-1: Firefox and Xulrunner vulnerabilities

Alin Rad Pop discovered a heap-based buffer overflow in Firefox when it converted strings to floating point numbers. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoki...

Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 vulnerabilities (USN-821-1)

Several flaws were discovered in the Firefox browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-3070,...

USN-821-1: Firefox and Xulrunner vulnerabilities

Several flaws were discovered in the Firefox browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-3070,...

Debian: Security Advisory (DSA-1854-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1854-1 (apr, apr-util)

The remote host is missing an update to apr, apr-util announced via advisory DSA 1854-1. OpenVAS Vulnerability Test $Id: deb18541.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1854-1 apr, apr-util Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

RedHat Security Advisory RHSA-2009:1190

The remote host is missing updates announced in advisory RHSA-2009:1190. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

[SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1854-1 [email protected] http://www.debian.org/security/ Florian Weimer August 08, 2009 http://www.debian.org/security/faq -...

DSA-1854-1 apr apr-util - arbitrary code execution

Bulletin has no description...

openSUSE Security Update : opera (opera-116)

Opera 9.51 was released as security and bugfix update. Full details are on http://www.opera.com/docs/changelogs/linux/951/ CVE-2008-3078: Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory...

Multiple Web Browsers Denial of Service Exploit (1 bug to rule them all)

Exploit for multiple platform in category dos / poc ======================================================================== Multiple Web Browsers Denial of Service Exploit 1 bug to rule them all ======================================================================== One bug to rule them all...

Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)

This host is missing a critical security update according to Microsoft Bulletin MS09-018. OpenVAS Vulnerability Test $Id: secpodms09-018.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Active Directory LDAP Remote Code Execution Vulnerability 969805 Authors: Nikita MR Updated to include Active...

Microsoft Active Directory LDAP Remote Code Execution Vulnerability (969805)

This host is missing a critical security update according to Microsoft Bulletin MS09-018. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...