775 matches found
CVE-2017-13810: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to obtain sensitive information by leveraging an error in packet counters...
PT-2017-13123
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.1 Description The issue involves the Kernel component and allows local users to obtain sensitive information by leveraging an error in packet counters. Recommendations For macOS versions prior to 10.13.1, update t...
How to Disable Monitoring of Specific Performance Counters in Veeam ONE
Purpose This article demonstrates how to limit the performance counters collected by Veeam ONE. This may be needed in situations where: There is a need to limit the network traffic between the Veeam ONE server and the virtual infrastructure servers. To decrease the Veeam ONE database growth rate...
DEBIAN-CVE-2017-12168
The accesspmuevcntr function in arch/arm64/kvm/sysregs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service assertion failure and host OS crash by accessing the Performance Monitors Cycle Count Register PMCCNTR...
September 19, 2017—KB4038774 (Preview of Monthly Rollup)
September 19, 2017—KB4038774 Preview of Monthly Rollup Applies To Windows 8.1 Windows Server 2012 R2 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4038792 released September 12, 2017 and also includes these new quality improvements as a...
Ubuntu: Security Advisory (USN-3360-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3360-1: Linux kernel vulnerabilities
It was discovered that the Linux kernel did not properly initialize a Wake- on-Lan data structure. A local attacker could use this to expose sensitive information kernel memory. CVE-2014-9900 It was discovered that the Linux kernel did not properly restrict access to /proc/iomem. A local attacker...
Product update: Virtuozzo 7.0 Update 4 Hotfix 1 (7.0.4-1091)
The new update for Virtuozzo 7.0.4 provides stability and usability bug fixes. Vulnerability id: PSBM-66625, PSBM-66445 guest.fs counters were reported in kilobytes for containers and in bytes for virtual machines. Vulnerability id: PSBM-66556 Backup location changed to default after update to...
libtiff: TIFFFlushData1 heap-buffer-overflow
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...
UBUNTU-CVE-2016-9534
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...
Vte Terminal DoS
The vulnerability of the Vte Terminal arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure a long cycle and exhaustion of processor resources by entering a control sequence with a high value...
CVE-2016-6257
The CVE relates to Lenovo Ultraslim dongles used with Liteon keyboards/mice where the firmware does not enforce incrementing AES counters, enabling an attacker in close proximity to inject encrypted keyboard input (KeyJack injection attack). Affected components are the Ultraslim Wireless keyboard...
CVE-2016-6257
The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system b...
PT-2016-6808
Name of the Vulnerable Software and Affected Versions Lenovo Ultraslim dongles affected versions not specified Description The issue concerns the firmware in Lenovo Ultraslim dongles, which does not properly enforce incrementing AES counters. This allows remote attackers to inject encrypted...
CVE-2016-6257: Undefined Security Weakness
The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system b...
Firefox Data Compromise
Overfilling the buffer in the Speex decoder of the Web Audio subsystem in Mozilla Firefox allows malicious actors to execute arbitrary code using specially crafted AudioBuffer channel counters and decoding frequencies...
DEBIAN-CVE-2015-7513
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service divide-by-zero error and host OS crash via a zero value, related to the kvmvmioctlsetpit and kvmvmioctlsetpit2 functions...
UBUNTU-CVE-2015-7513
arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service divide-by-zero error and host OS crash via a zero value, related to the kvmvmioctlsetpit and kvmvmioctlsetpit2 functions...
OracleVM 3.3 : net-snmp (OVMSA-2015-0099)
The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Quicker loading of IP-MIB::ipAddrTable 1191393 - Quicker loading of IP-MIB::ipAddressTable 1191393 - Fixed snmptrapd crash when '-OQ' paramete...
