13701 matches found
EulerOS 2.0 SP1 : kernel (EulerOS-SA-2016-1026)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the Linux kernel KVM subsystem's sysenter instruction emulation was not sufficient. An unprivileged guest user could use this...
EulerOS 2.0 SP2 : spice (EulerOS-SA-2017-1021)
According to the versions of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in spice in the server's protocol handling. An authenticated attacker could send crafted messages to the spice serv...
EulerOS 2.0 SP1 : fontconfig (EulerOS-SA-2016-1077)
According to the version of the fontconfig packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that cache files were insufficiently validated in fontconfig. A local attacker could create a specially crafted cache file to...
EulerOS 2.0 SP1 : python-pillow (EulerOS-SA-2017-1049)
According to the version of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in python-pillow. A crafted image file with negative dimensions could cause a buffer to be under-allocated, leading...
EulerOS 2.0 SP1 : libgcrypt (EulerOS-SA-2016-1081)
According to the version of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker able to obtain the first 580 bytes of the PRNG output...
EulerOS 2.0 SP1 : firefox (EulerOS-SA-2016-1002)
According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...
EulerOS 2.0 SP1 : openssh (EulerOS-SA-2017-1055)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11...
Virtuozzo 7 : readykernel-patch (VZA-2017-032)
According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the Linux kernel where having malicious IP options present would cause the...
EulerOS 2.0 SP1 : gstreamer1-plugins-bad-free (EulerOS-SA-2017-1008)
According to the versions of the gstreamer1-plugins-bad-free package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format...
EulerOS 2.0 SP1 : python (EulerOS-SA-2016-1036)
According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the Python CGIHandler class did not properly protect against the HTTPPROXY variable name clash in a CGI context. A remote...
Debian DLA-928-1 : libsndfile security update
Multiple vulnerabilities were found in libsndfile, a popular library for reading/writing audio files. CVE-2017-7585 In libsndfile before 1.0.28, an error in the 'flacbuffercopy' function flac.c can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. CVE-2017-758...
EulerOS 2.0 SP1 : mariadb (EulerOS-SA-2016-1011)
According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the MariaDB client library did not properly check host names against server identities noted in the X.509 certificates when...
EulerOS 2.0 SP1 : setroubleshoot, setroubleshoot-plugins (EulerOS-SA-2016-1033)
According to the versions of the setroubleshoot, setroubleshoot-plugins packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The setroubleshoot packages provide tools to help diagnose SELinux problems. When Access Vector Cache AVC messag...
EulerOS 2.0 SP1 : postgresql (EulerOS-SA-2016-1001)
According to the version of the postgresql packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in the PostgreSQL handling code for regular expressions. A remote...
EulerOS 2.0 SP1 : bind (EulerOS-SA-2017-1025)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A denial of service flaw was found in the way BIND handled query responses when both DNS64 and RPZ were used. A remote attacker could use this fla...
CVE-2017-8289
CVE-2017-8289 describes a stack-based buffer overflow in RIOT OS, specifically in the ipv6_addr_from_str.c module (ipv6_addr_from_str function). The vulnerability affects RIOT builds prior to 2017-04-25 and can allow a local attacker, and potentially remote attackers, to cause a denial of service...
GE Multilin SR, UR, and URplus Protective Relays (Update A)
CVSS v3 8.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GE Equipment: Multilin SR, UR, and URplus Protective Relays Vulnerabilities: Weak Cryptography for Passwords UPDATED INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-117-01 GE...
GE Multilin SR Protective Relays
CVSS v3 8.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GE Equipment: Multilin SR Protective Relays Vulnerabilities: Weak Cryptography for Passwords AFFECTED PRODUCTS The following versions of Multilin SR protective relays are affected: 750 Feeder Protection Relay, firmwar...
Ubuntu 17.04 : qemu vulnerabilities (USN-3268-1)
Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2016-10028 It was discovered that QEMU incorrectly handled the JAZZ RC4030 device. A privileged attacker...
