[slackware-security] php

New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/php-5.6.17-i486-1slack14.1.txz: Upgraded. This release fixes bugs and security issues. IMPORTANT: READ BELOW ABOUT POTENTIALLY...

Microsoft Excel Viewer Code Execution

The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel spreadsheet editor, as well as the Microsoft Office Compatibility Pack, is caused by buffer overflow. Exploitation of this vulnerability can allow an attacker to execute arbitrary code using a specially...

Microsoft Office Compatibility Pack Excel Viewer Excel Code Execution

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for viewing electronic spreadsheets, and the Microsoft Excel spreadsheet editor are caused by buffer overflows. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using...

Microsoft Office Package Code Execution

The vulnerability of the Microsoft Office package, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

Microsoft Office Code Execution

The vulnerability of the Microsoft Office package, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted email messag...

Microsoft Office Compatibility Pack Excel Viewer Excel Code Execution

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for viewing electronic spreadsheets, and the Microsoft Excel spreadsheet editor are caused by buffer overflows. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code using...

FreeBSD-SA-16:10.linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:10.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer issetugid2 system call vulnerability Category: core Module: kernel Announced:...

FreeBSD -- Linux compatibility layer issetugid(2) system call

Problem Description: A programming error in the Linux compatibility layer could cause the issetugid2 system call to return incorrect information. Impact: If an application relies on output of the issetugid2 system call and that information is incorrect, this could lead to a privilege escalation...

CVE-2016-1612

The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact vi...

CVE-2016-1612

Removed by vendor...

Veeam Backup & Replication add-on for Kaseya compatibility with Veeam Backup & Replication 9.x

The Kaseya plug-in for Veeam Backup & Replication was discontinued in 2019 and is no longer available nor supported by Veeam. Challenge Veeam Backup & Replication add-on for Kaseya needs to support Veeam Backup & Replication 9.x monitoring. Cause The names of Veeam Backup & Replication services...

Microsoft Excel Viewer Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Excel Viewer, a component of the Microsoft Office Compatibility Pack, and the Microsoft Excel spreadsheet editor is due to buffer overflow. Exploitation of this vulnerability could allow an attacker to execute arbitrary code using a specially crafted Office...

PT-2017-2031

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3, 10.1, and 10.2 Description The issue is related to insufficient access control in the FreeBSD kernel, which can be exploited to cause a denial of service or potentially gain privileges. This can be achieved by making a...

FreeBSD-SA-16:04.linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:04.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer setgroups2 system call vulnerability Category: core Module: kernel Announced:...

FreeBSD-SA-16:03.linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:03.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer incorrect futex handling Category: core Module: kernel Announced: 2016-01-14...

FreeBSD -- Linux compatibility layer setgroups(2) system call

Problem Description: A programming error in the Linux compatibility layer setgroups2 system call can lead to an unexpected results, such as overwriting random kernel memory contents. Impact: It is possible for a local attacker to overwrite portions of kernel memory, which may result in a privileg...

FreeBSD -- Linux compatibility layer incorrect futex handling

Problem Description: A programming error in the handling of Linux futex robust lists may result in incorrect memory locations being accessed. Impact: It is possible for a local attacker to read portions of kernel memory, which may result in a privilege escalation...

PT-2017-2032

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3, 10.1, and 10.2 Description The issue is related to the handling of Linux futex robust lists in the Linux compatibility layer of the kernel, allowing local users to potentially gain privilege and read portions of kernel...

CVE-2016-0035: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerability (3124585)

This host is missing a critical security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...