5681 matches found
Information disclosure
Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the getuser function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL...
Ubuntu 14.04 LTS / 16.04 LTS : MySQL vulnerabilities (USN-3269-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3269-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been...
libreoffice: Heap-use-after-free in Bundle::GetIndex
Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5288817537843200 Project: libreoffice Fuzzer: libFuzzerlibreofficecgmfuzzer Fuzz target binary: cgmfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-fre...
Important: bind
Issue Overview: A denial of service flaw was found in the way BIND handled a query response containing CNAME or DNAME resource records in an unusual order. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...
Debian DSA-3834-1 : mysql-5.5 - security update (Riddle)
Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.55, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly incompatible changes. Please see th...
Fedora 25 : libarchive (2017-55a8f10223)
fix two minor CVEs by backporting upstream commits Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
wireshark: Heap-buffer-overflow in print_address_prefix_buf
Detailed report: https://oss-fuzz.com/testcase?key=5180630432219136 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkip Fuzz target binary: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6070000046d7 Crash State:...
RHEL 6 : firefox (RHSA-2017:1104)
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
RedHat Update for nss and nss-util RHSA-2017:1100-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for nss CESA-2017:1100 centos7
Check the version of nss SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882698";...
firefox security update
CentOS Errata and Security Advisory CESA-2017:1106 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Virtuozzo Linux Errata and Security Advisory 2017:1100 Critical
Upstream security update. Follow RHSA-2017-1100 for details...
Virtuozzo Linux Errata and Security Advisory 2017:1105 Important
Upstream security update. Follow RHSA-2017-1105 for details...
Virtuozzo Linux Errata and Security Advisory 2017:1108 Moderate
Upstream security update. Follow RHSA-2017-1108 for details...
java-1.8.0-openjdk security and bug fix update
1:1.8.0.131-2.b13 - Backport 'S8153711: REDO JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command' - Resolves: rhbz1442162 1:1.8.0.131-1.b11 - Update to aarch64-jdk8u131-b11. - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783. - Update...
Virtuozzo Linux Errata and Security Advisory 2017:1104 Critical
Upstream security update. Follow RHSA-2017-1104 for details...
Virtuozzo Linux Errata and Security Advisory 2017:1109 Moderate
Upstream security update. Follow RHSA-2017-1109 for details...
Virtuozzo Linux Errata and Security Advisory 2017:0979 Moderate
Upstream security update. Follow RHSA-2017-0979 for details...