kernel security, bug fix, and enhancement update

2.6.32-573.22.1 - mm always decrement anonvma degree when the vma list is empty Jerome Marchand 1318364 1309898 2.6.32-573.21.1 - fs pipe: fix offset and len mismatch on pipeiovcopytouser failure Seth Jennings 1310148 1302223 CVE-2016-0774 - fs gfs2: Add missing else in transaddmeta/data Robert S...

[SECURITY] Fedora 22 Update: rubygem-actionpack-4.2.0-4.fc22

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

[SECURITY] Fedora 23 Update: rubygem-actionpack-4.2.3-5.fc23

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

The vulnerability of Xen hypervisors, which allows a malicious actor to trigger a service failure

The vulnerability of the VMX component of the Xen hypervisor is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker, operating locally, to cause a service failure by engaging in actions related to the RIP protocol...

Zend Framework < 2.0.8 / 2.1.x < 2.1.4 Multiple Vulnerabilities

Binary data 9146.prm...

[SECURITY] Fedora 23 Update: jabberd-2.3.3-7.fc23

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

[SECURITY] Fedora 22 Update: rubygem-actionpack-4.2.0-3.fc22

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

Xen Denial of Service Vulnerability (CNVD-2016-01330)

Xen is a virtualization technology developed by the University of Cambridge that can be used in the Linux kernel, allowing multiple operating systems to run simultaneously. A denial of service vulnerability exists in versions prior to Xen 4.6.x that allows HVM guest users to cause a denial of...

Protecting Personal Information: Freedom Box

FreedomBox is a personal server that protects your privacy. It hosts on demand applications such as file sharing, shared calendaring, instant messaging, secure voice conference calling, blog and wiki. FreedomBox is a free software stack, a subset of the Debian universal operating system, that can...

DEBIAN-CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

UBUNTU-CVE-2015-7581

actionpack/lib/actiondispatch/routing/routeset.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service superfluous caching and memory consumption by leveraging an application's use of a wildcard controller route...

Juniper Junos RPD Routing Process DoS (JSA10715)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in the Label Distribution Protocol LDP implementation. An unauthenticated, remote attacker attacker can exploit this, by sending a specially crafted LDP...

Juniper Networks Junos OS Routing Engine Denial of Service Vulnerability

Juniper Networks Junos on SRX Series devices is a set of network operating systems that run in SRX Series service gateway devices.Routing Engine is one of the routing engine components. The Routing Engine for Juniper Networks Junos OS crashes the RPD routing process when a remote attacker submits...

Iptables Firewall Generator: FireHOL

FireHOL is an iptables firewall generator producing stateful iptables packet filtering firewalls, on Linux hosts and routers with any number of network interfaces, any number of routes, any number of services served, any number of complexity between variations of the services including positive a...

Juniper Networks Junos OS LDP DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability with LDP enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1257

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R...

CVE-2016-1257

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R...

Design/Logic Flaw

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R...

Fortinet SSH back door further using the method-vulnerability warning-the black bar safety net

How to use this SSH Backdoor into the network? Well this is what this article is going to speak something. This Backdoor access to the firewall is the root, that is, all firewall operation we can do, here we use a firewall a vpn service to access to the internal network, so for further penetratio...

HP Networking Products and H3C Comware Devices Denial of Service Vulnerability

H3C Comware is H3C's core software platform that builds the foundation of its IP network products. A security vulnerability exists in H3C Comware 5/7 devices, which can be exploited by remote attackers to bypass target access restrictions or cause a denial of service through virtual routing and...