Security Bulletin: A vulnerability in glibc affects PowerKVM

Summary PowerKVM is affected by a vulnerability in the GNU C Library glibc. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-1000366 DESCRIPTION: Glibc could allow a local attacker to execute arbitrary code on the system, caused by a vulnerability that allows...

Security Bulletin: A vulnerability in NSS affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Network Security Services NSS. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7502 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, is vulnerable to a denial of service, caused by a...

Security Bulletin: A vulnerability in sudo affects PowerKVM

Summary PowerKVM is affected by a vulnerability in sudo. IBM has now addressed this vulnerability, which is described by two CVEs. Vulnerability Details CVEID: CVE-2017-1000367 DESCRIPTION: sudo could allow a local attacker to gain elevated privileges, caused by improper parsing in the...

Security Bulletin: Vulnerabilities in HTTPD affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Apache HTTPD. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-0736 DESCRIPTION: Apache HTTPD could allow a remote attacker to obtain sensitive information, caused by an error in modsessioncrypto. By sending...

Security Bulletin: Vulnerabilities in icoutils affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in icoutils. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-5208 DESCRIPTION: icoutils could allow a local attacker to execute arbitrary code on the system, caused by an integer overflow in the wrestool program. B...

Security Bulletin: Vulnerabilities in JasPer affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in JasPer. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-5203 DESCRIPTION: JasPer JPEG-2000 library could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error within...

Security Bulletin: A vulnerability in rpcbind affects PowerKVM

Summary PowerKVM is affected by a vulnerability in rpcbind. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-8779 DESCRIPTION: rpcbind, LIBTIRPC, and NTIRPC are vulnerable to a denial of service, caused by improper validation of XDR strings in memory allocation. By...

Security Bulletin: Vulnerabilities in openjpeg affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in openjpeg. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-5139 DESCRIPTION: Google Chrome is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by pdfium. By persuading a victim to...

Security Bulletin: A vulnerability in libtirpc affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libtirpc. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-8779 DESCRIPTION: rpcbind, LIBTIRPC, and NTIRPC are vulnerable to a denial of service, caused by improper validation of XDR strings in memory allocation. By...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9604 DESCRIPTION: Linux Kernel could allow a local attacker to bypass security restrictions, caused by an error in the built-in keyrings for...

Security Bulletin: A vulnerability in NSS affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Mozilla Network Security Services NSS. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-5461 DESCRIPTION: Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by an...

Security Bulletin: A vulnerability in ghostscript affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ghostscript. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-8291 DESCRIPTION: Artifex Ghostscript could allow a remote attacker to execute arbitrary commands on the system. By using .rsdparams type confusion with ...

Security Bulletin: Vulnerabilities in rabbitmq-server affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in rabbitmq-server. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8786 DESCRIPTION: RabbitMQ is vulnerable to a denial of service, caused by an error in the Management plugin. By sending a specially crafted...

Security Bulletin: A vulnerability in the Linux kernel affects PowerKVM

Summary PowerKVM is affected by a vulnerability in the Linux kernel. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-7097 DESCRIPTION: Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by the setgid bit being preserved duri...

Security Bulletin: Vulnerabilities in Bind affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in ISC Bind. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3136 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by the improper handling of query requests when using DNS64 with "break-dnssec ye...

Security Bulletin: A vulnerability in nagios affects PowerKVM

Summary PowerKVM is affected by a vulnerability in nagios. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-9565 DESCRIPTION: Nagios Core could allow a remote attacker to execute arbitrary command on the system, caused by an error in the RSS feed reader component. B...

Security Bulletin: A vulnerability in PyCrypto affects PowerKVM

Summary PowerKVM is affected by a vulnerability in python-crypto PyCrypto. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2013-7459 DESCRIPTION: PyCrypto is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the ALGnew function in...

Security Bulletin: A vulnerability in the Linux Kernel affects PowerKVM

Summary PowerKVM is affected by a vulnerability in the Linux Kernel. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7184 DESCRIPTION: Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by heap-based out-of-bounds access. An...

Security Bulletin: Vulnerabilities in Qemu affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Qemu. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-6835 DESCRIPTION: QEMU is vulnerable to a denial of service, caused by a buffer-over-read issue in vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c. ...

Security Bulletin: Vulnerabilities in GStreamer affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GStreamer. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9634 DESCRIPTION: GStreamer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the flxdecodedeltafli function in...