Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-11600 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by out-of-bound access in thenet/xfrm/xfrmpolicy.c. By using...

Security Bulletin: A vulnerability in authconfig affects PowerKVM

Summary PowerKVM is affected by a vulnerability in authconfig. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7488 DESCRIPTION: Authconfig could allow a remote attacker to obtain sensitive information, caused by a flaw when using SSSD to perform authentication. By...

Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in MariaDB. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3600 DESCRIPTION: An unspecified vulnerability in Oracle MySQL related to the Server Client mysqldump component could allow an authenticated attacker to...

Security Bulletin: Vulnerabilities in tcpdump affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in tcpdump. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-7986 DESCRIPTION: tcpdump is vulnerable to a buffer overflow, caused by improper bounds checking by the GeoNetworking parser in the print-geonet.c and oth...

Security Bulletin: Vulnerabilities in Apache HTTPD affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Apache HTTPD. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-9788 DESCRIPTION: Apache HTTPD is vulnerable to a denial of service, caused by the failure to properly initialize memory used to process ''Digest''...

Security Bulletin: Vulnerabilities in TigerVNC affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in TigerVNC. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-7396 DESCRIPTION: TigerVNC is vulnerable to a denial of service, caused by a memory leak in the CConnection::CConnection function in CConnection.cxx. By...

Security Bulletin: A vulnerability in OpenLDAP affects PowerKVM

Summary PowerKVM is affected by a vulnerability in OpenLDAP. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-9287 DESCRIPTION: OpenLDAP is vulnerable to a denial of service, caused by a double free memory error in servers/slapd/back-mdb/search.c. By issuing a searc...

Security Bulletin: Vulnerabilities in OpenSSH affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in OpenSSH. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-6515 DESCRIPTION: OpenSSH is vulnerable to a denial of service, caused by the failure to limit password lengths for password authentication by the...

Security Bulletin: Vulnerabilities in GnuTLS affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GnuTLS. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-7869 DESCRIPTION: GnuTLS is vulnerable to a denial of service, caused by an integer overflow and heap-based buffer overflow in cdkpktread function in...

Security Bulletin: Vulnerabilities in git affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in git. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-8386 DESCRIPTION: Git could allow a remote authenticated attacker to gain elevated privileges on the system. By giving a specially crafted repository name wit...

Security Bulletin: Vulnerabilities in PostgreSQL affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in PostgreSQL IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-7486 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to obtain sensitive information, caused by improper implementation of...

Security Bulletin: A vulnerability in Spice affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Spice. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7506 DESCRIPTION: spice is vulnerable to a denial of service, caused by an out-of-bounds write error when processing message. By sending specially-crafted...

Security Bulletin: A vulnerability in Ghostscript affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Ghostscript. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7207 DESCRIPTION: Artifex Software Ghostscript is vulnerable to a denial of service, caused by a NULL pointer dereference in the memgetbitsrectangle...

Security Bulletin: Vulnerabilities in libtasn1 affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in libtasn1 library. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-3622 DESCRIPTION: GNU Libtasn1 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the asn1extractderoctet...

Security Bulletin: Vulnerabilities in GNU Bash affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GNU Bash. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9401 DESCRIPTION: GNU Bash could allow a local attacker to bypass security restrictions, caused by a use-after-free error. An attacker could exploit this...

Security Bulletin: A vulnerability in Python affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Python. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2014-9365 DESCRIPTION: Python could allow a remote attacker to bypass security restrictions, caused by the failure to validate TLS certificate by the HTTP librarie...

Security Bulletin: A vulnerability in curl affects PowerKVM

Summary PowerKVM is affected by a vulnerability in curl. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-7167 DESCRIPTION: libcurl could allow a local attacker to execute arbitrary code on the system, caused by an integer overflow in the curlescape, curleasyescape,...

Security Bulletin: Vulnerabilities in Graphite2 affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Graphite 2 Library. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-7778 DESCRIPTION: Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write i...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-6074 DESCRIPTION: Linux kernel is vulnerable to a denial of service, caused by improper handling of DCCPPKTREQUEST packet data structures in the...

Security Bulletin: Vulnerabilities in ISC BIND affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in ISC BIND. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3143 DESCRIPTION: ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when an attacker can send and receive messag...