Design/Logic Flaw

Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" may insecurely load Dynamic Link Libraries

Overview Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili...

JVN#87403477: Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" may insecurely load Dynamic Link Libraries

Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitra...

UBUNTU-CVE-2018-5703

The tcpv6synrecvsock function in net/ipv6/tcpipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service slab out-of-bounds write or possibly have unspecified other impact via vectors involving TLS...

Design/Logic Flaw

A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber management daemon bbe-smgd, and lead to a denial of service condition. The issue was caused by attempting to process an unbounded number o...

CVE-2017-1635

IBM Tivoli Monitoring (KDH internal web server) is affected by CVE-2017-1635, a use-after-free vulnerability that allows remote code execution or crash via crafted requests. The vulnerability impacts the KDH component of IBM Tivoli Monitoring Basic Services (versions 6.2.2 through 6.2.2 FP9). Det...

Design/Logic Flaw

Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows compromised system firmware to impact SGX security via incorrect early system state...

CVE-2017-1181

IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487...

CVE-2017-1181

IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487...

CVE-2017-1182

IBM Tivoli Monitoring Portal v6 could allow a local (network-adjacent) attacker to execute arbitrary commands on the system when using default HTTP communications. This is associated with CVE-2017-1182 and is reflected in IBM security bulletins for Tivoli Monitoring, which enumerate the affected ...

CVE-2017-1181

CVE-2017-1181 affects IBM Tivoli Monitoring Portal (KCQ component) server/client communications: a default, unencrypted console connection enables a local attacker to gain elevated privileges. Affected products/versions include IBM Tivoli Portal Server 6.2.2 FP9, 6.2.3 FP5/FP6, and 6.3.0 FP7. Rem...

CVE-2017-1182

IBM Tivoli Monitoring Portal v6 could allow a local network adjacent attacker to execute arbitrary commands on the system, when default client-server default communications, HTTP, are being used. IBM X-Force ID: 123493...

CVE-2017-1181

IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitoring, caused by the default console connection not being encrypted. IBM X-Force ID: 123487...

CVE-2017-1183

Summary: CVE-2017-1183 affects IBM Tivoli Monitoring Portal v6, where a local network-adjacent attacker could modify SQL commands sent to the Portal Server over unencrypted HTTP, enabling partial to full data integrity/availability impact as described in the connected bullets. Affected products/v...

USN-3342-1: Linux kernel vulnerabilities

USN 3326-1 fixed a vulnerability in the Linux kernel. However, that fix introduced regressions for some Java applications. This update addresses the issue. We apologize for the inconvenience. It was discovered that a use-after-free flaw existed in the filesystem encryption subsystem in the Linux...

CVE-2016-6083

CVE-2016-6083 affects IBM Tivoli Monitoring SOAP Server (KSH component) within TEMS/ITM environments. The vulnerability arises from the SOAP interface configuration, enabling an unauthenticated user to access SOAP queries that may contain sensitive information. Affected IBM Tivoli Monitoring SOAP...

Linux kernel denial of service vulnerability (CNVD-2017-07508)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'dccpv6requestrecvsock' function in the net/dccp/ipv6.c file in Linux kernel versions 4.11.1 and earlier, which stems from the...

Linux kernel denial of service vulnerability (CNVD-2017-07507)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'sctpv6createacceptsk' function in the net/sctp/ipv6.c file in Linux kernel versions 4.11.1 and earlier, which stems from the...

April 11, 2017—KB4015547 (Security-only update)

None None...

October security releases and v6 LTS "Boron" security inclusions

October security releases and v6 LTS "Boron" security inclusions Update 18-October-2016 Releases available Updates are now available for all active Node.js release lines. The following releases all contain fixes for CVE-2016-5180 "arescreatequery single byte out of buffer write": Node.js v0.10.48...