Security Bulletin: Vulnerabilities in Spice affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Spice. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9577 DESCRIPTION: Spice is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by mainchannelallocmsgrcvbuf function. By sending...

Security Bulletin: A vulnerability in BIND affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ISC BIND. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-3135 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error when using both DNS64 and RPZ to rewrite query responses. A remote...

Security Bulletin: Vulnerabilities in TigerVNC affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in TigerVNC. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2014-8240 DESCRIPTION: TigerVNC is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the MallocFrameBuffer function in vncviewer.c...

Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in OpenSSL. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: The SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets during a SSL handshake. By...

Security Bulletin: A vulnerability in OpenSSH affects PowerKVM

Summary PowerKVM is affected by a vulnerability in OpenSSH. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2015-8325 DESCRIPTION: OpenSSH could allow a local attacker to gain elevated privileges on the system, caused by an error in the dosetupenv function when the...

Security Bulletin: Vulnerabilities in ntp affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the network time protocol daemon ntp. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-7426 DESCRIPTION: NTP is vulnerable to a denial of service, caused by the improper handling of invalid server responses. By...

Security Bulletin: Vulnerabilities in Ghostscript affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in ghostscript. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2013-5653 DESCRIPTION: Ghostscript could allow a remote attacker to obtain sensitive information, caused by the failure to honor the -dSAFER option by the...

Security Bulletin: A vulnerability in glibc affects PowerKVM

Summary PowerKVM is affected by a vulnerability in glibc. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-3075 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the nssdns implementation of the...

Security Bulletin: A vulnerability in policycoreutils affects PowerKVM

Summary PowerKVM is affected by a vulnerability in policycoreutils. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-7545 DESCRIPTION: Policycoreutils could allow a remote attacker to execute arbitrary commands on the system, caused by a TIOCSTI ioctl attack in the...

Security Bulletin: Vulnerabilities in mariadb affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Oracle MySQL Server mariadb. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-3492 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server: Optimizer component could allow a remote...

Security Bulletin: Vulnerabilities in ISC Bind affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in ISC Bind. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9131 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by the improper handling of responses during recursion. By sending a malformed...

Security Bulletin: A vulnerability in NetworkManager affects PowerKVM

Summary PowerKVM is affected by a vulnerability in NetworkManager. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-0764 DESCRIPTION: Red Hat NetworkManager could allow a local attacker to obtain sensitive information, caused by a race condition vulnerability that...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-7042 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by the use of an incorrect buffer size for certain timeout data by th...

Security Bulletin: A vulnerability in libvirt affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libvirt. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2015-5160 DESCRIPTION: libvirt could allow a local attacker to obtain sensitive information, caused by the leak of private credentials to the process list. By...

Security Bulletin: A vulnerability in vim affects PowerKVM

Summary PowerKVM is affected by a vulnerability in vim. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-1248 DESCRIPTION: Vim could allow a local attacker to execute arbitrary code on the system, caused by the improper validation of the 'filetype', 'syntax' and...

Security Bulletin: A vulnerability in python affects PowerKVM

Summary PowerKVM is affected by a vulnerability in python. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-5636 DESCRIPTION: zipimport module for Python is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the getdata function in...

Security Bulletin: Vulnerabilities in NTP affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Network Time Protocol NTP. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-5194 DESCRIPTION: Network Time Protocol NTP is vulnerable to a denial of service, caused by an uninitialized variable when processing...

Security Bulletin: Vulnerabilities in postgresql affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in postgresql. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-5423 DESCRIPTION: PostgreSQL is vulnerable to a denial of service. By sending specially crafted SQL statements containing CASE/WHEN commands, a remote...

Security Bulletin: Vulnerabilities in cURL affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in cURL/libcURL. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-5419 DESCRIPTION: cURL/libcURL could allow a remote attacker to bypass security restrictions, caused by the failure to check the TLS connection serve...

Security Bulletin: Vulnerabilities in Mozilla Network Security Services (NSS) affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Mozilla Network Security Services nss and nss-util. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-2834 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, could allow a remote...