irssi -- use-after-free potential code execution

The irssi project reports: Use after free while producing list of netjoins CWE-416. This issue was found and reported to us by APic. This issue usually leads to segmentation faults. Targeted code execution should be difficult...

Ubuntu 16.10 : linux vulnerabilities (USN-3190-1)

Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon mcryptd in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service system crash. CVE-2016-10147 It was discovered that a...

USN-3190-1: Linux kernel vulnerabilities

Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon mcryptd in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service system crash. CVE-2016-10147 It was discovered that a...

Out-of-bounds

KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service out-of-bounds array access and host OS crash via a crafted interrupt request, related to...

CVE-2016-9777

KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service out-of-bounds array access and host OS crash via a crafted interrupt request, related to...

CVE-2016-9777

KVM in the Linux kernel (before 4.8.12) is vulnerable when I/O APIC is enabled. A guest user can craft an interrupt request to bypass VCPU index restrictions, potentially gaining host privileges or causing a host denial of service via out-of-bounds access and host crash. Affected components: arch...

CVE-2016-9777

KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service out-of-bounds array access and host OS crash via a crafted interrupt request, related to...

CVE-2016-9777

KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service out-of-bounds array access and host OS crash via a crafted interrupt request, related to...

CVE-2016-6457

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

CVE-2016-6413

The installation procedure on Cisco Application Policy Infrastructure Controller APIC devices 1.32f mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva50496...

Code injection

The installation procedure on Cisco Application Policy Infrastructure Controller APIC devices 1.32f mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva50496...

CVE-2016-6413

CVE-2016-6413 affects Cisco Application Policy Infrastructure Controller (APIC) devices, specifically version 1.3(2f). The installation procedure mishandles binary files, allowing an authenticated local attacker to obtain root-level privileges and take full control of the device. Remediation is a...

CVE-2016-6413

The installation procedure on Cisco Application Policy Infrastructure Controller APIC devices 1.32f mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva50496...

Cisco Application Policy Infrastructure Controller Multiple Vulnerabilities in OpenSSL

On December 3, 2015, the OpenSSL Project released a security advisory detailing five vulnerabilities. Cisco Application Policy Infrastructure Controller APIC Software incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote...

Cisco Application Policy Infrastructure Controller Binary Privilege Escalation Vulnerability

A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced...

Cisco Application Policy Infrastructure Controller Binary Privilege Escalation Vulnerability

A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to incorrect installation and permissions settings for binary files when installin...

CVE-2016-1365

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507...

CVE-2016-1365

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507...

Design/Logic Flaw

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507...

CVE-2016-1365

CVE-2016-1365 affects Cisco APIC-EM (Grapevine update process) and allows an authenticated remote attacker to execute arbitrary commands as root via a crafted upgrade parameter. The root cause is insufficient input sanitization during the Grapevine update process. Impact is remote code execution ...