5681 matches found
Virtuozzo Linux Errata and Bugfix Advisory 2017:1301
Upstream security update. Follow RHBA-2017-1301 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2017:1302
Upstream security update. Follow RHBA-2017-1302 for details...
Virtuozzo Linux Errata and Security Advisory 2017:1271 Important
Upstream security update. Follow RHSA-2017-1271 for details...
gdal: Index-out-of-bounds in DGNProcessElement
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5673081030836224 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
Virtuozzo Linux Errata and Security Advisory 2017:1264 Important
Upstream security update. Follow RHSA-2017-1264 for details...
Virtuozzo Linux Errata and Security Advisory 2017:1265 Moderate
Upstream security update. Follow RHSA-2017-1265 for details...
Virtuozzo Linux Errata and Security Advisory 2017:1262 Important
Upstream security update. Follow RHSA-2017-1262 for details...
CVE-2017-9119
The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service memory consumption and application crash or possibly have unspecified other impact by triggering crafted operations on array data structures...
CVE-2017-9113
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...
adns -- multiple vulnerabilities
Ian Jackson and the adns project reports: Vulnerable applications: all adns callers. Exploitable by: the local recursive resolver. Likely worst case: Remote code execution. Vulnerable applications: those that make SOA queries. Exploitable by: upstream DNS data sources. Likely worst case: DoS cras...
jasper security update
CentOS Errata and Security Advisory CESA-2017:1208 An update for jasper is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...
Virtuozzo Linux Errata and Security Advisory 2017:1230 Important
Upstream security update. Follow RHSA-2017-1230 for details...
gdal: Heap-buffer-overflow in PackBitsDecode
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5296144668164096 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
gdal: Index-out-of-bounds in start_pass_huff_decoder
Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6249814238953472 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
CVE-2017-8906
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the x265encoderencode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in th...
Updated kernel packages fixes security vulnerabilities
This kernel update is based on upstream 4.4.65 and fixes at least the following security issues: fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service memory consumption and deadlock vi...
Virtuozzo Linux Errata and Security Advisory 2017:1206 Important
Upstream security update. Follow RHSA-2017-1206 for details...
Important: Red Hat Security Advisory: bind security update
An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
CVE-2017-8804
The xdrbytes and xdrstring functions in the GNU C Library aka glibc or libc6 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service virtual memory allocation, or memory consumption if an overcommit setting is not used via a crafted UDP packet...