SUSE SLES11 Security Update : kernel (SUSE-SU-2016:3248-1)

The SUSE Linux Enterprise 11 SP 3 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

SUSE SLES11 Security Update : kernel (SUSE-SU-2016:3203-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

SUSE-SU-2016:3188-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3146-1)

The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

SUSE-SU-2016:3146-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-1426)

The openSUSE Leap 42.2 kernel was updated to 4.4.36 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2015-1350: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended...

Linux kernel 'sound/core/pcm_lib.c' memory misreference vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A memory misreference vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to cause a denial of service memory consumption...

PT-2016-7823 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.7 Description: The issue is related to a race condition in the snd pcm period elapsed function in the ALSA subsystem. This can be exploited by local users to cause a denial of service use-after-free or possibl...

[SECURITY] Fedora 22 Update: libxmp-4.3.10-1.fc22

Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...

[SECURITY] Fedora 23 Update: libsndfile-1.0.25-18.fc23

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

[SECURITY] Fedora 23 Update: libsndfile-1.0.25-17.fc23

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

Adobe Flash Player PCM File Integer Overflow (APSB12-27) - Ver2 (CVE-2012-5677)

A remote code execution vulnerability has been reported in Adobe Flash Player and AIR. The vulnerability is due to an error while handling specially crafted PCM files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PCM file. Successful exploitation would...

[security bulletin] HPSBPV02918 rev.2 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Code Execution, Session Reuse

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03897409 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03897409 Version: 2 HPSBPV02918 rev....

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet File Upload

File upload vulnerability in HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

HP PCM+ SNAC Registration Server UpdateCertificatesServlet File Upload

File upload vulnerability in HP PCM+ SNAC Registration Server UpdateCertificatesServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

CVE-2013-4810

HP ProCurve Manager PCM 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager IDM 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to 1 EJBInvokerServlet or 2 JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplica...

DSquare Exploit Pack: D2SEC_HPPCM2

Name| d2sechppcm2 ---|--- CVE| CVE-2013-4811 Exploit Pack| D2ExploitPack Description| HP PCM+ SNAC Registration Server Remote Code Execution Vulnerability Notes|...

DSquare Exploit Pack: D2SEC_HPPCM

Name| d2sechppcm ---|--- CVE| CVE-2013-4812 Exploit Pack| D2ExploitPack Description| HP PCM+ SNAC Registration Server Remote Code Execution Vulnerability Notes|...

CVE-2013-4810

HP ProCurve Manager (PCM) 3.20/4.0, PCM+ 3.20/4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management are affected. The root cause is a remote code execution vector via a marshalled object to the EJBInvokerServlet or JMXInvokerServlet, enabling an attacker to execute arbitrar...