Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-18710 DESCRIPTION: Linux Kernel could allow a local attacker to obtain sensitive information, caused by improper bounds checking in...

Security Bulletin: A vulnerability in Perl affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Perl. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-18311 DESCRIPTION: Perl is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the Perlmysetenv function. By sending a specially-crafte...

Security Bulletin: A vulnerability in NetworkManager affects PowerKVM

Summary PowerKVM is affected by a vulnerability in systemd NetworkManager. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-15688 DESCRIPTION: systemd is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the dhcp6 client. By sending a...

Security Bulletin: A vulnerability in Spice affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Spice. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2019-3813 DESCRIPTION: Spice is vulnerable to a denial of service, caused by an off-by-one error in array access in spice/server/memslot.c. A local attacker could...

Security Bulletin: Vulnerabiliies in systemd affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in systemd. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-16865 DESCRIPTION: systemd is vulnerable to a denial of service, caused by a memory corruption flaw when calling the alloca function. By sending...

Security Bulletin: Vulnerabilities in Ghostscript affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Artifex Ghostscript. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-16539 DESCRIPTION: Artifex Ghostscript could allow a remote attacker to obtain sensitive information, caused by improper access checking in te...

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux kernel . IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-10675 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a use-after-free in the dogetmempolicy function in mm/mempolicy....

Security Bulletin: A vulnerability in libfuse affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libfuse. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10906 DESCRIPTION: libfuse could allow a remote attacker to bypass security restrictions, caused by an error when SELinux is active. An attacker could exploi...

Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in OpenSSL. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-0732 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the sending of a very large prime value to the client by a malicious server duri...

Security Bulletin: A vulnerability in ISC Bind affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ISC Bind. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-5740 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a defect in the deny-answer-aliases feature. By triggering this defect, a remote...

Security Bulletin: Vulnerabilities in Ghostscript affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Artifex Ghostscript. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-16542 DESCRIPTION: Artifex Ghostscript is vulnerable to a denial of service, caused by an improper interpreter stack-size checking. By...

Security Bulletin: Vulnerabilities in MariaDB affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in MariaDB. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-2819 DESCRIPTION: An unspecified vulnerability in Oracle MySQL related to the Server InnoDB component could allow an authenticated attacker to cause a...

Security Bulletin: Vulnerabilities in glusterfs affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in glusterfs. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-10913 DESCRIPTION: glusterfs could allow a remote attacker to obtain sensitive information, caused by improper handling of xattr request. By sending a...

Security Bulletin: A vulnerability in NSS affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Mozilla Network Security Services NSS. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-12384 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox, could allow a remote attacker to obtain...

Security Bulletin: A vulnerability in wpa_supplicant affects PowerKVM

Summary PowerKVM is affected by a vulnerability in wpasupplicant. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-14526 DESCRIPTION: wpasupplicant could allow a remote attacker within range of the Access Point and client to obtain sensitive information, caused by t...

Security Bulletin: A vulnerability in wget affects PowerKVM

Summary PowerKVM is affected by a vulnerability in wget. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-0494 DESCRIPTION: GNU Wget could allow a remote attacker to bypass security restrictions, caused by the failure to properly process Set-Cookie responses. By...

Security Bulletin: Vulnerabilities in JasPer affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in JasPer. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-1000050 DESCRIPTION: JasPer is vulnerable to a denial of service, caused by a NULL pointer exception in the jp2encode function. By sending a...

Security Bulletin: A vulnerability in OpenSLP affects PowerKVM

Summary PowerKVM is affected by a vulnerability in OpenSLP. IBM has now addressed this vulnerability. Vulnerability Details Relevant CVE Information: CVEID: CVE-2017-17833 DESCRIPTION: OpenSLP, as used in multiple products, is vulnerable to a denial of service. A remote attacker could exploit thi...

Security Bulletin: A vulnerability in SPICE affects PowerKVM

Summary PowerKVM is affected by a vulnerability in SPICE. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10873 DESCRIPTION: SPICE is vulnerable to a denial of service, caused by a missing check in pythonmodules/demarshal.py:writevalidatearrayitem. By sending a...

Security Bulletin: A vulnerability in git affects PowerKVM

Summary PowerKVM is affected by a vulnerability in git. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-17456 DESCRIPTION: Git could allow a remote attacker to execute arbitrary code on the system, caused by a flaw during processing of a recursive "git clone" of a...