CVE-2015-3991

CVE-2015-3991 affects strongSwan versions 5.2.2 and 5.3.0, enabling a remote attacker to cause a daemon crash (DoS) or execute arbitrary code. Public references across OSV, NVD, Debian/CVEs corroborate the issue. Fedora advisory notes a later update (5.3.2) fixes this CVE; other entries (openSUSE...

Intel ConnMan Project connection manager daemon buffer overflow vulnerability

Intel ConnMan Project connection manager daemon is an Internet connection manager from Intel Corporation USA for managing Internet connections in embedded devices. A buffer overflow vulnerability exists in Intel ConnMan Project connection manager daemon version 1.34 and earlier. A remote attacker...

[SECURITY] Fedora 27 Update: xen-4.9.0-9.fc27

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 26 Update: xen-4.8.1-8.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

SUSE-SU-2017:2319-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information XSA-226, bsc1051787. - CVE-2017-12137: Incorrectly-aligned updates ...

CVE-2017-1000201

A NULL pointer dereference flaw was found in the UnregisterHandler method implemented in the tcmu-runner daemon. A local, non-root user with access to the D-Bus system bus could call UnregisterHandler method with non-existing tcmu handler as paramater to trigger DoS...

SUSE SLES12 Security Update : quagga (SUSE-SU-2017:2294-1)

This update provides Quagga 1.1.1, which brings several fixes and enhancements. Security issues fixed : - CVE-2017-5495: Telnet 'vty' interface DoS due to unbounded memory allocation. bsc1021669 - CVE-2016-1245: Stack overrun in IPv6 RA receive code. bsc1005258 Bug fixes : - Do not enable zebra's...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2017:1916 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

ALPINE-CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

Null pointer dereference

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

CVE-2017-11185

CVE-2017-11185 affects strongSwan’s gmp plugin prior to version 5.6.0. An attacker can send specially crafted RSA signatures to trigger a NULL pointer dereference, causing the strongSwan daemon to crash (DoS). The available connected sources confirm the vulnerability is due to insufficient valida...

CVE-2017-11185

The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted RSA signature...

[SECURITY] Fedora 26 Update: knot-resolver-1.3.2-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

The vulnerability in the qemu-nbd hardware emulation software of QEMU allows a hacker to induce a system failure.

The vulnerability in the qemu-nbd hardware emulation software of QEMU is related to incorrect data processing. Exploiting this vulnerability allows a remote attacker to cause a service failure abrupt termination of the daemon by disconnecting the connection between the server and the client durin...

Juniper Networks Junos OS MPLS DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in rpd when receiving a malformed MPLS ping packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Linux Ad & Malware Blocking Script: Hostsblock

Hostsblock is a bash script designed to take advantage of /etc/hosts file to provide system-wide blocking of internet advertisements, malicious domains, trackers, and other undesirable content. To do so, it downloads a configurable set of blocklists and processes their entries into a single...

RedHat Update for glibc RHSA-2017:1916-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AIX bind Advisory : bind_advisory14.asc (IV91214) (IV91253) (IV91254) (IV91255) (IV91256) (IV91257)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A denial of service vulnerability exists when handling malformed options sections. An unauthenticated, remote attacker can exploit this, via a specially crafted OPT resource record, to cause an...

CVE-2017-10664

qemu-nbd in QEMU aka Quick Emulator does not ignore SIGPIPE, which allows remote attackers to cause a denial of service daemon crash by disconnecting during a server-to-client reply attempt...

samba: fd_open_atomic infinite loop due to wrong handling of dangling symlinks

A flaw was found in the way Samba handled dangling symlinks. An authenticated malicious Samba client could use this flaw to cause the smbd daemon to enter an infinite loop and use an excessive amount of CPU and memory...