PT-2013-1011

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue exists due to the lack of initialization of certain structures in the net/xfrm/xfrm user.c file of the Linux kernel. This allows local users with the CAP NET ADMIN capability to obtain...

PT-2013-2000

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue allows local users to obtain sensitive information from kernel heap memory. This can be achieved by leveraging the CAP NET ADMIN capability and providing a new or updated state, due to t...

UBUNTU-CVE-2013-1826

The xfrmstatenetlink function in net/xfrm/xfrmuser.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dumponestate function calls, which allows local users to gain privileges or cause a denial of service NULL pointer dereference and system crash by leveraging the...

PT-2013-2001

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The issue is related to the copy to user auth function in net/xfrm/xfrm user.c, which incorrectly uses a C library function for copying a string. This allows local users with the CAP NET ADMIN...

PT-2012-4677

Name of the Vulnerable Software and Affected Versions WordPress versions 3.4.0 through 3.4.1 Description The issue allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting XSS attacks by leveraging the Administrator or Editor role and composing...

VirtualBox 4.1 Final for Linux Released

VirtualBox 4.1 Final for Linux Released VirtualBox is a general-purpose full virtualizer for x86 hardware, targeted at server, desktop and embedded use. This version is a major update. The following major new features were added: Support for cloning of VMs bug 5853, see the manual for more...

kernel: ipv6: netfilter: ip6_tables: fix infoleak to userspace

net/ipv6/netfilter/ip6tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...

PT-2011-2527

Name of the Vulnerable Software and Affected Versions TIBCO Rendezvous versions 8.2.1 through 8.3.0 TIBCO Enterprise Message Service EMS versions 5.1.0 through 6.0.0 TIBCO Runtime Agent TRA versions 5.6.2 through 5.7.0 TIBCO Silver BPM Service version prior to 1.0.4 TIBCO Silver CAP Service versi...

CVE-2011-0649: Undefined Security Weakness

Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service EMS 5.1.0 through 6.0.0, Runtime Agent TRA 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix...

kernel: net/packet/af_packet.c: reading uninitialized stack memory

net/packet/afpacket.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETRAW capability to read copies of the applicable structures...

PT-2010-5504

Name of the Vulnerable Software and Affected Versions TIBCO ActiveMatrix Service Grid versions 3.0.0 through 3.1.0 TIBCO ActiveMatrix Service Bus versions 3.0.0 through 3.0.1 TIBCO ActiveMatrix BusinessWorks Service Engine version 5.9.0 TIBCO ActiveMatrix BPM versions 1.0.1 through 1.0.2 TIBCO...

kvm security update

kvm-83-164.0.1.el55.25 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-164.el55.25 - Adding loadgsindex to kmod symbol greylist - Related: bz639886 CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic rhel-5.5.z...

CVE-2007-1217

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service crash and possibly gain privileges via a crafted CAPI packet...

PT-2006-1130 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.16 Description: A race condition exists in the do add counters function in netfilter for the Linux kernel, allowing local users with CAP NET ADMIN capabilities to read kernel memory. This is achieved by triggering the...

security flaw

Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAPNETADMIN capability, which could allow local users to conduct unauthorized activities via 1 ipv4/ipsockglue.c and 2 ipv6/ipv6sockglue.c...