VMSA-2011-0012 : VMware ESXi and ESX updates to third-party libraries and ESX Service Console

a. ESX third-party update for Service Console kernel This update takes the console OS kernel package to kernel-2.6.18-238.9.1 which resolves multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-1083, CVE-2010-2492, CVE-2010-2798,...

VMSA-2011-0012:VMware ESXi and ESX updates to third party libraries and ESX Service Console

VMSA-2011-0012.3 VMware ESX third party updates for Service Console packages glibc and dhcp VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0012.3 VMware Security Advisory Synopsis: VMware ESX third party updates for Service Console packages glibc and dhcp VMware Security...

CentOS Update for kernel CESA-2011:0004 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for kernel RHSA-2011:0004-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 : kernel (CESA-2011:0004)

Updated kernel packages that fix multiple security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whi...

Linux Kernel "net/"子系统套接字过滤器本地信息泄露漏洞

BUGTRAQ ID: 45064 CVE ID: CVE-2010-4161 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在信息泄露漏洞，本地攻击者可利用此漏洞获取敏感信息。 此问题源于从arg needlock = 0的tcpv4,6rcv函数调用函数skfilter时，套接字当时未能锁定。 Linux kernel 2.6.0-2.6.18 rc7 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

CVE-2010-4161

CVE-2010-4161 affects the Linux kernel 2.6.18 build used by Red Hat Enterprise Linux 5. The issue lies in udp_queue_rcv_skb in net/ipv4/udp.c, where a crafted socket filter and UDP traffic can trigger a denial of service (deadlock/system hang). The related CVE-2010-4158 is referenced. Connected d...