64 matches found
openSUSE Security Update : tomcat (openSUSE-2019-1808)
This update for tomcat to version 9.0.21 fixes the following issues : Security issues fixed : - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames bsc1131055. - CVE-2019-0221: Fixed a cross site scripting vulnerabilit...
OPENSUSE-SU-2019:1673-1 Security update for tomcat
This update for tomcat to version 9.0.20 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames bsc1131055. - CVE-2019-0221: Fixed a cross site scripting vulnerability...
Security update for tomcat (moderate)
openSUSE Security Update: Security update for tomcat Announcement ID: openSUSE-SU-2019:1673-1 Rating: moderate References: 1111966 1131055 1136085 Cross-References: CVE-2019-0199 CVE-2019-0221 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one errata is no...
MGASA-2017-0442 Updated libxfont/libxfont2 packages fix security vulnerability
Fixes open files with ONOFOLLOW. CVE-2017-16611...
CVE-2017-16611
In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open but not read files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files...
DEBIAN-CVE-2017-16611
In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open but not read files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files...
gollum and gollum-lib allow remote authenticated users to execute arbitrary code
The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string master is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...
The vulnerability of the file viewing utilities used by lsof processes allows a malicious user to elevate their privileges to the level of the root user.
The vulnerability of the file viewing utilities used by lsof processes arises from buffer overflows. Exploiting this vulnerability can allow an attacker, operating locally, to elevate their privileges to that of a root user...
Android sof elevation of privilege vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. lsof is a component that displays all open file processes. A power lifting vulnerability exists in Android's lsof. A local attacker can exploit the vulnerability with the help of ...
CVE-2015-1274
Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to...
USN-2533-1 sudo vulnerability
Jakub Wilk and Stephane Chazelas discovered that Sudo incorrectly handled the TZ environment variable. An attacker with Sudo access could possibly use this issue to open arbitrary files, bypassing intended permissions...
openSUSE Security Update : xinetd (openSUSE-SU-2014:0517-1)
xinetd was updated to receive security fixes and a bug fix. Security issues fixed : - CVE-2013-4342 bnc844230 - xinetd ignored user and group directives for tcpmux services - CVE-2012-0862 bnc762294 - xinetd enabled all services when tcp multiplexing is used Also added support for setting maximum...
Fedora 18 : libvirt-0.10.2.5-1.fc18 (2013-8681)
Rebased to version 0.10.2.5 - Fix creating snapshot on lvm pool bz 955371 - Properly escape audit paths bz 922186 - Follow updated packaging guidelines for user alloc bz 924501 - CVE-2013-1962 Open files DoS bz 963789, bz 953107 Note that Tenable Network Security has extracted the preceding...
Fedora 19 : libvirt-1.0.5.1-1.fc19 (2013-8635)
Rebased to version 1.0.5.1 - Follow updated packaging guidelines for user alloc bz 924501 - CVE-2013-1962 Open files DoS bz 963789, bz 953107 - Fix stream operations like screenshot bz 960879 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error
A denial of service flaw was found in the remote procedure call RPC implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time...
Volatility 2.0 - Advanced Memory Forensics [With Video Demonstration]
Volatility 2.0 - Advanced Memory Forensics With Video Demonstration The Volatility Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques ar...
Multiple BSD Operating Systems setusercontext() Vulnerabilities
No description provided by source. BSD setusercontext vulnerabilites discovered by Kingcope, July 2009 lewls XD Let's go.. BSD derived operating systems have a special function to set a "user context". The function setusercontext is available on for example FreeBSD 5.0 and 7.0. An example from...
Important: Red Hat Security Advisory: bind security and bug fix update
Updated bind packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System D...
Fedora Core 9 FEDORA-2009-5608 (acpid)
The remote host is missing an update to acpid announced via advisory FEDORA-2009-5608. OpenVAS Vulnerability Test $Id: fcore20095608.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5608 acpid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
