firefox security update

60.1.0-4.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 60.1.0-4 - Disabled jemalloc on all second arches 60.1.0-3 - Updated to 60.1.0 ESR build2 60.1.0-2 - Disabled jemalloc on second arches 60.1.0-1 - Updated to 60.1.0 ESR 60.0-12 - Fixing bundled libffi...

Microsoft Windows NT 4.0 DHCP Server Request Buffer Overflow - Ver2 (CVE-2004-0900)

A buffer overflow vulnerability has been reported in Microsoft Windows NT. An attacker could exploit this vulnerability via a malformed DHCP message. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application...

Cisco IOS XU FTP Server Buffer Overflow - Ver2 (CVE-2007-2586)

A buffer overflow vulnerability exists in Cisco IOS 5.2XU. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

SAP Business One License Manager Buffer Overflow - Ver2 (CVE-2009-4988)

A buffer overflow vulnerability exists in SAP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Zenworks Configuration Management Buffer Overflow - Ver2 (CVE-2015-0786)

A buffer overflow vulnerability exists in Zenworks Configuration Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

WellinTech KingView Buffer Overflow - Ver2 (CVE-2011-0406; CVE-2012-1830)

A buffer overflow vulnerability exists in WellinTech KingView. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Blabsoft Bopup Communication Server Buffer Overflow - Ver2 (CVE-2009-2227)

A buffer overflow vulnerability exists in Blabsoft Bopup Communication Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CA BrightStor Discovery Service Buffer Overflow - Ver2 (CVE-2005-0260)

A Stack-based buffer overflow vulnerability exists in CA BrightStor. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system or cause application crashes...

Flexera FlexNet Publisher Buffer Overflow - Ver2 (CVE-2015-8277)

A buffer overflow vulnerability exists in FlexNet Publisher License Server. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system or cause application crashes...

HP Intelligent Management Center Remote Code Execution (CVE-2017-5806) - Ver2

A buffer overflow vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2018-0311

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software insufficiently validates...

Samba V3 Buffer Overflow - Ver2 (CVE-2012-0870)

A buffer overflow vulnerability exists in Samba v3. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Security Bulletin: Multiple vulnerabilities in freetype2 affect IBM Flex System Manager (FSM)

Summary Multiple vulnerabilities have been identified in freetype2 that is embedded in the FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2017-8287 DESCRIPTION: Freetype2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the...

Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple expat vulnerabilities

Summary Multiple security vulnerabilities have been discovered in expat that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities. Vulnerability Details CVEID: CVE-2012-0876 DESCRIPTION: Expat is vulnerable to a denial of service, caused by insufficient randomization of hash...

Security Bulletin: Multiple Security Vulnerabilities in IBM Tivoli Storage Manager FastBack (CVE-2016-0212, CVE-2016-0213, CVE-2016-0216)

Summary IBM Tivoli Storage Manager FastBack is affected by multiple stack based buffer overflow security vulnerabilities. These vulnerabilities may cause the server to crash. Vulnerability Details CVEID: CVE-2016-0212 DESCRIPTION: IBM Tivoli Storage Manager FastBack is vulnerable to a stack-based...

Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Privileged Identity Manager

Summary There were multiple security vulnerabilities fixed in the IBM Security Privileged Identity Manager Product Vulnerability Details CVEID: CVE-2016-2996 DESCRIPTION: IBM Security Privileged Identity Manager Virtual Appliance could allow an authenticated user to append lines to any file on th...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Access Manager for Web (CVE-2015-7547)

Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM Security Access Manager for Web. Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the...

Description of the security update for Excel 2016: June 12, 2018

None None...

Description of the security update for vulnerabilities in Windows Server 2008: June 12, 2018

Description of the security update for vulnerabilities in Windows Server 2008: June 12, 2018 Summary Multiple vulnerabilities exist within Windows Server 2008.To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures CVE. CVE-2018-1040 CVE-2018-8225...

Amazon Linux 2 : procps-ng (ALAS-2018-1031)

Multiple integer overflows leading to heap corruption flaws were discovered in file2strvec. These vulnerabilities can lead to privilege escalation for a local attacker who can create entries in procfs by starting processes, which will lead to crashes or arbitrary code execution in proc utilities...