5860 matches found
Fedora Update for openstack-nova FEDORA-2013-15373
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : cacti-0.8.8b-2.fc19 (2013-15466)
This update fixes two cross-site scripting issues and one SQL injection issue in the latest version of Cacti. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...
Low: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #6
Updated Red Hat Storage 2.0 packages that fix multiple security issues, various bugs, and add one enhancement are now available. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Amazon Linux AMI : rpm (ALAS-2012-61)
Multiple flaws were found in the way RPM parsed package file headers. An attacker could create a specially crafted RPM package that, when its package header was accessed, or during package signature verification, could cause an application using the RPM library such as the rpm command line tool, ...
Amazon Linux AMI : freetype (ALAS-2013-150)
A flaw was found in the way the FreeType font rendering engine processed certain Glyph Bitmap Distribution Format BDF fonts. If a user loaded a specially crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code wit...
Amazon Linux AMI : bind (ALAS-2012-113)
An uninitialized data structure use flaw was found in BIND when DNSSEC validation was enabled. A remote attacker able to send a large number of queries to a DNSSEC validating BIND resolver could use this flaw to cause it to exit unexpectedly with an assertion failure. CVE-2012-3817 C Tenable...
Amazon Linux AMI : libtiff (ALAS-2012-65)
Two integer overflow flaws, leading to heap-based buffer overflows, were found in the way libtiff attempted to allocate space for a tile in a TIFF image file. An attacker could use these flaws to create a specially crafted TIFF file that, when opened, would cause an application linked against...
Amazon Linux AMI : kernel (ALAS-2012-34)
The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume. C Tenable Network Security, Inc. The descriptive text a...
Amazon Linux AMI : quagga (ALAS-2012-90)
The bgpcapabilityorf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service assertion failure and daemon exit by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering ORF capability TLV in an OPEN message. C Tenable...
Amazon Linux AMI : rpm (ALAS-2011-14)
Multiple flaws were found in the way the RPM library parsed package headers. An attacker could create a specially crafted RPM package that, when queried or installed, would cause rpm to crash or, potentially, execute arbitrary code. CVE-2011-3378 C Tenable Network Security, Inc. The descriptive...
Amazon Linux AMI : rubygems (ALAS-2012-79)
RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amaz...
Amazon Linux AMI : kernel (ALAS-2012-118)
The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket. C Tenable Network...
Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2012-119)
It was discovered that the Beans component in OpenJDK did not perform permission checks properly. An untrusted Java application or applet could use this flaw to use classes from restricted packages, allowing it to bypass Java sandbox restrictions. CVE-2012-1682 A hardening fix was applied to the...
Fedora 18 : ngircd-20.3-1.fc18 (2013-15290)
Fix for a denial of service/crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Fedora 19 : perl-Module-Metadata-1.000015-1.fc19 (2013-15196)
This update clarifies the module's documentation about the code it executes, i.e. it does 'eval' a module to determine its version number. Previously it said that it did not execute unsafe code. Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora 18 : perl-Module-Metadata-1.000015-1.fc18 (2013-15157)
This update clarifies the module's documentation about the code it executes, i.e. it does 'eval' a module to determine its version number. Previously it said that it did not execute unsafe code. Note that Tenable Network Security has extracted the preceding description block directly from the...
Fedora 19 : glibc-2.17-14.fc19 (2013-15316)
systemd is now required during build so that installing or updating nscd does not result in any warnings. rtkaio bits are now tested correctly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 19 : python3-3.3.2-6.fc19 (2013-15254)
Fix for CVE-2013-4238 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for acpid FEDORA-2013-14774
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for putty FEDORA-2013-14656
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...