Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by numerous vulnerabilities in the linux kernel. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2013-7421 DESCRIPTION: Linux Kernel could allow a local attacker to bypass security restrictions, caused by an error in the in the Crypto API. An...

Security Bulletin: A vulnerability in Ceph affects PowerKVM (CVE-2015-5245)

Summary PowerKVM is affected by a vulnerability in Ceph. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2015-5245 DESCRIPTION: Ceph Object Gateway is vulnerable to CRLF injection, caused by improper validation of user-supplied input. By using a specially-crafted bucket...

Security Bulletin: A vulnerability in PHP affects PowerKVM (CVE-2016-5385)

Summary PowerKVM is affected by a vulnerability in PHP. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-5385 DESCRIPTION: PHP could allow a remote attacker to redirect HTTP traffic of CGI application, caused by the failure to protect applications from the presence ...

Security Bulletin: A vulnerability in ganglia affects PowerKVM (CVE-2015-6816)

Summary PowerKVM is affected by a vulnerability in ganglia. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-6816 DESCRIPTION: Ganglia Web could allow a remote attacker to bypass security restrictions, caused by an error in the GangliaAuth.php script. An attacker could explo...

Security Bulletin: A vulnerability in lighttpd affects PowerKVM (CVE-2016-1000212)

Summary PowerKVM is affected by a vulnerability in lighttpd. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-1000212 DESCRIPTION: lighttpd could allow a remote attacker to redirect HTTP traffic of CGI application, caused by the failure to protect applications from...

Security Bulletin: A vulnerability in crypto++ affects PowerKVM (CVE-2016-3995)

Summary PowerKVM is affected by a vulnerability in crypto++ aka cryptopp. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-3995 DESCRIPTION: Crypto++ could allow a remote attacker to bypass security restrictions, caused by a timing attack error. A remote attacker could explo...

Security Bulletin: Vulnerabilities in nagios affect PowerKVM

Summary PowerKVM is affected by numerous vulnerabilities in nagios. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-5008 DESCRIPTION: Snoopy could allow a remote attacker to execute arbitrary commands on the system, caused by an incomplete fix related to the use of...

Security Bulletin: A vulnerability in NRPE affects PowerKVM (CVE-2014-2913)

Summary PowerKVM is affected by a vulnerability in the Nagios Remote Plugin Executor NRPE. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2014-2913 DESCRIPTION: Nagios Remote Plugin Executor NRPE could allow a remote attacker to execute arbitrary code on the system,...

Security Bulletin: Vulnerabilities in nginx affect PowerKVM

Summary PowerKVM is affected by four vulnerabilities in nginx. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-0742 DESCRIPTION: Nginx is vulnerable to a denial of service, caused by an invalid pointer dereference. By sending malformed UDP packets, a remote...

Security Bulletin: Vulnerabilities in Python affect PowerKVM

Summary PowerKVM is affected by five vulnerabilities in Python. These vulnerabilities are now fixed. Vulnerability Details Affecting both PowerKVM 3.1 and PowerKVM 2.1: CVEID: CVE-2016-0772 DESCRIPTION: Python's smtplib library is vulnerable to a stripping attack. An exception isn't returned by t...

Security Bulletin: A vulnerability in pigz affects PowerKVM (CVE-2015-1191)

Summary PowerKVM is affected by a vulnerability in pigz. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2015-1191 DESCRIPTION: pigz could allow a remote attacker to traverse directories on the system, caused by an error in pigz.c. An attacker could send a...

Security Bulletin: Two vulnerabilities in libvirt affect PowerKVM (CVE-2015-5313, CVE-2016-5008)

Summary PowerKVM is affected by two vulnerabilities in libvirt. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-5313 DESCRIPTION: libvirt could allow a local attacker to traverse directories on the system, caused by an error in the virStorageBackendFileSystemVolCreate...

Security Bulletin: Multiple vulnerabilities in mariadb affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in mariadb. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-0640 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server: DML component has no confidentiality impact, partial integrit...

Security Bulletin: Multiple vulnerabilities in libtiff affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in libtiff. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-8127 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by an out-of-bound read error in multiple tools. A remote attacker could exploit th...

Security Bulletin: Multiple vulnerabilities in libxml2 affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in libxml2. IBM has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-1762 DESCRIPTION: Apple Safari and Apple iOS could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption erro...

Security Bulletin: A vulnerability in the Apache HTTP Server affects PowerKVM (CVE-2016-5387)

Summary PowerKVM is affected by a vulnerability in the Apache HTTP Server httpd. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-5387 DESCRIPTION: Apache HTTP Server could allow a remote attacker to redirect HTTP traffic of CGI application, caused by the lack of protection ...

Security Bulletin: A vulnerability in the Linux kernel affects PowerKVM (CVE-2016-3044)

Summary PowerKVM is affected by a denial of service DoS vulnerability in the Linux kernel. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-3044 DESCRIPTION: There is a denial of service vulnerability in KVM on Power where a guest can cause a host CPU to hang, spinning in an...

Security Bulletin: Multiple vulnerabilities in ImageMagick affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in ImageMagick. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-8895 DESCRIPTION: ImageMagick is vulnerable to a buffer overflow, caused by improper bounds checking by multiple integer overflows in coders/icon.c. B...

Security Bulletin: Multiple vulnerabilities in PCRE affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in the PCRE library. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-8386 DESCRIPTION: PCRE is vulnerable to a heap-based buffer overflow, caused by the improper handling of the interaction of lookbehind assertions...

Security Bulletin: Multiple vulnerabilities in ntp affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in the Network Time Protocol. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-5300 DESCRIPTION: Network Time Protocol NTP could allow a remote attacker to bypass security restrictions, caused by the failure to...