Privilege escalation

A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...

CVE-2017-0710

CVE-2017-0710 is an elevation-of-privilege vulnerability in the Android kernel (Upstream Linux tcb/KernelTCB). The CNVD entry describes a privilege-lifting issue in KernelTCB in Android where an attacker could bypass privilege validation and access arbitrary ptrace, enabling local privilege escal...

Fedora 24 : openvpn (2017-5596f2f94d)

Updates to the latest upstream OpenVPN 2.3.17, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

CVE-2017-10791

There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

CVE-2017-10699

avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...

Virtuozzo Linux Errata and Security Advisory 2017:1581 Important

Upstream security update. Follow RHSA-2017-1581 for details...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1603

Upstream security update. Follow RHBA-2017-1603 for details...

cmark: Index-out-of-bounds in S_render_node

Project: https://github.com/jgm/cmark.git https://github.com/commonmark/cmark.git Detailed report: https://oss-fuzz.com/testcase?key=5546760854306816 Project: cmark Fuzzer: libFuzzercmarkfuzzer Fuzz target binary: cmarkfuzzer Job Type: libfuzzerubsancmark Platform Id: linux Crash Type:...

Virtuozzo Linux Errata and Security Advisory 2017:1576 Important

Upstream security update. Follow RHSA-2017-1576 for details...

[SECURITY] [DLA 1003-1] unrar-nonfree security update

Package : unrar-nonfree Version : 1:4.1.4-1+deb7u2 CVE ID : CVE-2012-6706 Debian Bug : 865461 It was reported that unrar fixed a VMSFDELTA memory corruption issue in their latest version unrarsrc-5.5.5.tar.gz. This problem was reported to Sophos AV in 2012 but never reach upstream rar. For Debian...

Virtuozzo Linux Errata and Security Advisory 2017:1574 Moderate

Upstream security update. Follow RHSA-2017-1574 for details...

Virtuozzo Linux Errata and Security Advisory 2016:2872 Moderate

Upstream security update. Follow RHSA-2016-2872 for details...

thunderbird security update

CentOS Errata and Security Advisory CESA-2017:1561 An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

libreoffice: Heap-use-after-free in SvxMSDffManager::SolveSolver

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6423722980278272 Project: libreoffice Fuzzer: libFuzzerlibreofficepptfuzzer Fuzz target binary: pptfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...

Virtuozzo Linux Errata and Security Advisory 2017:1561 Important

Upstream security update. Follow RHSA-2017-1561 for details...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2017:1484 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2017:1480 An update for glibc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Virtuozzo Linux Errata and Security Advisory 2017:1484 Important

Upstream security update. Follow RHSA-2017-1484 for details...

Virtuozzo Linux Errata and Security Advisory 2017:1480 Important

Upstream security update. Follow RHSA-2017-1480 for details...

DEBIAN-CVE-2017-1000369

Exim supports the use of multiple "-p" command line arguments which are malloc'ed and never free'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch...