Security Bulletin: A vulnerability in Apache Portable Runtime affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Apache Portable Runtime apr. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-12613 DESCRIPTION: Apache Portable Runtime APR could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds...

Security Bulletin: A vulnerability in procmail affects PowerKVM

Summary PowerKVM is affected by a vulnerability in procmail. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-16844 DESCRIPTION: Procmail is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the loadbuf function in the formail...

Security Bulletin: Vulnerabilities in PHP affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in PHP libgd. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-10168 DESCRIPTION: libgd could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in gdio.c. By persuading a...

Security Bulletin: Vulnerabilities in postgresql affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in postgresql . IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-15097 DESCRIPTION: PostgreSQL could allow a local authenticated attacker to gain elevated privileges on the system, caused by an error in the Red Hat...

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux kernel . IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-9242 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by an error in the ip6appenddata function when checking whether an...

Security Bulletin: Vulnerabilities in wpa_supplicant affect PowerKVM (KRACK)

Summary PowerKVM is affected by vulnerabilities in wpasuppliacant. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-13077 DESCRIPTION: Wi-Fi Protected Access WPA and Wi-Fi Protected Access II WPA2 protocols, as used in multiple products, could allow a remote...

Security Bulletin: Vulnerabilities in wget affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in wget. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-13090 DESCRIPTION: GNU wget is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the fdreadbody function in src/retr.c. By...

Security Bulletin: A vulnerability in libnl3 affects PowerKVM

Summary PowerKVM is affected by a vulnerability in NetworkManager libnl3. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-0553 DESCRIPTION: Google Android could allow a local attacker to gain elevated privileges on the system, caused by a flaw in libnl. By persuadi...

Security Bulletin: A vulnerability in nginx affects PowerKVM

Summary PowerKVM is affected by a vulnerability in nginx. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7529 DESCRIPTION: Nginx could allow a remote attacker to obtain sensitive information, caused by an integer overflow in Nginx range filter module. By sending...

Security Bulletin: Vulnerabilities in nagios affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in magios. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-14312 DESCRIPTION: Nagios Core could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the nagios.cfg. By...

Security Bulletin: Vulnerabilities in OpenvSwitch affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in OpenvSwitch. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-9265 DESCRIPTION: Open vSwitch is vulnerable to a buffer overflow, caused by improper bounds checking by the ofputilpullofp15groupmod function in...

Security Bulletin: A vulnerability in nss affects PowerKVM

Summary PowerKVM is affected by a vulnerability in nss. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7805 DESCRIPTION: Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in TLS 1.2 generating handsha...

Security Bulletin: A vulnerability in bluez affects PowerKVM

Summary PowerKVM is affected by a vulnerability in bluez. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-1000250 DESCRIPTION: BlueZ could allow a remote attacker to obtain sensitive information, caused by an error in the SDP server. By sending SDP request packets,...

Security Bulletin: A vulnerability in emacs affects PowerKVM

Summary PowerKVM is affected by a vulnerability in emacs. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-14482 DESCRIPTION: GNU Emacs could allow a remote attacker to execute arbitrary code on the system, caused by improper validation of user request. By sending a...

Security Bulletin: A vulnerability in httpd affects PowerKVM

Summary PowerKVM is affected by a vulnerability in the Apache HTTP Server httpd. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-9798 DESCRIPTION: Apache HTTP Server could allow a remote attacker to obtain sensitive information, caused by a flaw in the HTTP OPTIONS...

Security Bulletin: A vulnerability in ausgeas affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ausgeas. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-7555 DESCRIPTION: Augeas is vulnerable to a heap-based buffer overflow. By sending specially crafted strings, a remote attacker could overflow a buffer and...

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux kernel . IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-12153 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference in the nl80211setrekeydata function i...

Security Bulletin: A vulnerability in subversion affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Apache Subversion. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-9800 DESCRIPTION: Apache Subversion could allow a remote attacker to execute arbitrary commands on the system, caused by the connection to URLs...

Security Bulletin: A vulnerability in libsoup affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libsoup. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-2885 DESCRIPTION: GNOME libsoup is vulnerable to a stack-based buffer overflow, caused by improper bounds checking with HTTP Chunked Encoding. By sending a...

Security Bulletin: Vulnerabilities in glibc affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the GNU C Library glibc. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2014-9761 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the nan...