Security Bulletin: A vulnerability in the Apache HTTP Server affects PowerKVM (CVE-2016-5387)

Summary PowerKVM is affected by a vulnerability in the Apache HTTP Server httpd. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-5387 DESCRIPTION: Apache HTTP Server could allow a remote attacker to redirect HTTP traffic of CGI application, caused by the lack of protection ...

Security Bulletin: A vulnerability in the Linux kernel affects PowerKVM (CVE-2016-3044)

Summary PowerKVM is affected by a denial of service DoS vulnerability in the Linux kernel. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-3044 DESCRIPTION: There is a denial of service vulnerability in KVM on Power where a guest can cause a host CPU to hang, spinning in an...

Security Bulletin: Vulnerabilities in ISC Bind affect PowerKVM (CVE-2016-1285, CVE-2016-1286)

Summary PowerKVM is affected by vulnerabilities in ISC Bind. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-1286 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error when parsing signature records for DNAME resource records. A remote attacker...

Security Bulletin: Multiple vulnerabilities in Python affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in Python. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2013-1752 DESCRIPTION: Python SSL module is vulnerable to denial of service, caused by an unlimited readline function call. A remote attacker could exploit this...

Security Bulletin: Vulnerability in GNU Grep affects PowerKVM (CVE-2015-1345)

Summary PowerKVM is affected by a vulnerability in GNU Grep. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-1345 DESCRIPTION: GNU grep is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by an error in kwset.c. A remote attacker could overflow...

Security Bulletin: Vulnerability in netcf affects PowerKVM (CVE-2014-8119)

Summary PowerKVM is affected by a vulnerability in netcf. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2014-8119 DESCRIPTION: The netcfg package in Linux is vulnerable to a denial of service, caused by the improper processing of XPath expressions by the findifcfgpath function...

Security Bulletin: Vulnerabilities in MIT Kerberos 5 (krb5) affect PowerKVM (CVE-2014-5355, CVE-2015-2694)

Summary PowerKVM is affected by two vulnerabilities in MIT Kerberos 5 krb5. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-5355 DESCRIPTION: MIT Kerberos is vulnerable to a denial of service, caused by a NULL pointer dereference in the krb5recvauth function. By sending...

Security Bulletin: Vulnerability in libssh2 affects PowerKVM (CVE-2015-1782)

Summary A vulnerability in libssh2 CVE-2015-1782 affects PowerKVM. Vulnerability Details CVEID: CVE-2015-1782 DESCRIPTION: libssh2 is vulnerable to a denial of service, caused by an error in kexagreemethods function. By sending a specially-craftedlity to cause the system to stop responding...

Security Bulletin: Vulnerability in rpcbind affects PowerKVM (CVE-2015-7236)

Summary A denial of service vulnerability in rpcbind CVE-2015-7236 affects PowerKVM. Vulnerability Details CVEID: CVE-2015-7236 DESCRIPTION: rpcbind is vulnerable to a denial of service, caused by a use-after-free in PMAPCALLIT. By sending specially crafted packets, a remote attacker could exploi...

Security Bulletin: Vulnerability in Python-httplib2 affects PowerKVM (CVE-2013-2037)

Summary PowerKVM is affected by a vulnerability in python-httplib2. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2013-2037 DESCRIPTION: The python-httplib2 could allow a remote attacker to obtain sensitive information, caused by the improper validation of https certificates. ...

Security Bulletin: Vulnerability in Libcrypt++ affects PowerKVM (CVE-2015-2141)

Summary PowerKVM is affected by a vulnerability in libcrypt++. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-2141 DESCRIPTION: libcrypt++ could allow a remote attacker to obtain sensitive information, caused by weak Rabin-Williams digital signature algorithm in...

Security Bulletin: Vulnerability in OpenSLP affects PowerKVM (CVE-2015-5177)

Summary PowerKVM is affected by a vulnerability in OpenSLP. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-5177 DESCRIPTION: OpenSLP is vulnerable to a denial of service, caused by a double free error in the SLPDProcessMessage function. A remote attacker could exploit this...

Security Bulletin: Vulnerability in lighttpd affects PowerKVM (CVE-2015-3200)

Summary PowerKVM is affected by a vulnerability in lighttpd CVE-2015-3200. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-3200 DESCRIPTION: lighttpd could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. An attacker could...

Security Bulletin:Vulnerabilities in wpa_supplicant may affect PowerKVM (CVE-2015-1863 and CVE-2015-4142)

Summary Vulnerabilities in wpasupplicant may affect PowerKVM CVE-2015-1863 and CVE-2015-4142. These vulnerability are now fixed. Note that although the code exists in PowerKVM, the functionality is not enabled or supported as shipped. Vulnerability Details CVEID: CVE-2015-1863 DESCRIPTION:...

Security Bulletin: Vulnerabilities in libXfont affect PowerKVM (CVE-2015-1802, CVE-2015-1803, CVE-2015-1804)

Summary PowerKVM is affected by three vulnerabilities in libXfont. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-1802 DESCRIPTION: X.Org libXfont could allow a local attacker to gain elevated privileges on the system, caused by an error in bdfReadProperties in the...

Security Bulletin: PowerKVM is affected by cups vulnerabilities (multiple CVEs)

Summary PowerKVM is affected by cups vulnerabilities multiple CVEs. Vulnerability Details CVEID: CVE-2014-9679 DESCRIPTION: CUPS is vulnerable to a buffer overflow, caused by an integer overflow in cupsRasterReadPixels. By persuading a victim to open a specially-crafted raster file, a remote...

Security Bulletin: PowerKVM is affected by kernel vulnerabilities (Multiple CVEs)

Summary PowerKVM is affected by multiple kernel vulnerabilities. Vulnerability Details CVEID: CVE-2015-2041 DESCRIPTION: Linux Kernel could allow a local attacker to obtain sensitive information, caused by an information leak in llc2timeouttable. An attacker could exploit this vulnerability to le...

Security Bulletin: PowerKVM is affected by glibc vulnerabilities (Multiple CVEs)

Summary PowerKVM is affected by multiple glibc vulnerabilities. Vulnerability Details CVEID: CVE-2014-6040 DESCRIPTION: The GNU C Library glibc is vulnerable to a denial of service, caused by the improper validation of input by the iconv function when converting IBM933, IBM935, IBM937, IBM939 or...

Security Bulletin: Multiple Unzip vulnerabilities affect PowerKVM (Multiple CVEs)

Summary PowerKVM is affected by several vulnerabilities in OpenSSL. Vulnerability Details CVEID: CVE-2014-8139 DESCRIPTION: Info-ZIP UnZip is vulnerable to a heap-based buffer overflow, caused by improper bounds checking within the CRC32 verification. A lo CVSS Base Score: 4.4 CVSS Temporal Score...

Security Bulletin: Multiple Kerberos (krb5) vulnerabilities affect PowerKVM (Multiple CVEs)

Summary PowerKVM is affected by several vulnerabilities in Kerberos krb5. Vulnerability Details CVEID: CVE-2014-5352 DESCRIPTION: MIT krb5 could allow a remote authenticated attacker to execute arbitrary code on the system,, caused by a double-free error in gssprocesscontexttoken. An attacker cou...