USN-2848-1 linux vulnerabilities

Felix Wilhelm discovered a race condition in the Xen paravirtualized drivers which can cause double fetch vulnerabilities. An attacker in the paravirtualized guest could exploit this flaw to cause a denial of service crash the host or potentially execute arbitrary code on the host. CVE-2015-8550...

PT-2015-7802

Name of the Vulnerable Software and Affected Versions Xen versions 3.1.x through 4.3.x Description The issue allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service by consuming disk space. This can be achieved by leveraging a system with...

PT-2015-2907

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.x through 4.6.x Description The issue is related to the libxl toolstack library in Xen, which does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process...

[SECURITY] Fedora 23 Update: glibc-2.22-6.fc23

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

PT-2017-6652 · Openhpi +2 · Openhpi +2

Name of the Vulnerable Software and Affected Versions: OpenHPI versions prior to 3.6.0 Description: The issue allows local users to cause a denial of service due to disk consumption by filling the filesystem hosting /var/lib. This is possible because the /var/lib/openhpi directory has...

openstack-nova: Nova instance migration process does not stop when instance is deleted

A denial of service flaw was found in the OpenStack Compute nova instance migration process. Because the migration process does not terminate when an instance is deleted, an authenticated user could bypass user quota and deplete all available disk space by repeatedly re-sizing and deleting an...

Moderate: Red Hat Security Advisory: openstack-nova security update

Updated openstack-nova packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 7.0. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

PT-2015-6137

Name of the Vulnerable Software and Affected Versions OpenStack Glance versions prior to 2015.1.1 kilo Description The issue allows remote authenticated users to cause a denial of service by consuming disk space. This is achieved by repeatedly using the import task flow API to create images and...

SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2015:1359-1)

The libqt4 library was updated to fix several security and non security issues. The following vulnerabilities were fixed : - bsc921999: CVE-2015-0295: division by zero when processing malformed BMP files - bsc927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling - bsc927807:...

Piriform CCleaner Information Disclosure Vulnerability

Piriform CCleaner is an archive cleaning software developed by Piriform, an independent software studio in the UK. Piriform CCleaner suffers from an information disclosure vulnerability that allows local users to obtain sensitive information by searching unallocated disk space...

CVE-2015-3999

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space...

Design/Logic Flaw

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space...

CVE-2015-3999

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space...

CVE-2015-3999

CCleaner vulnerability CVE-2015-3999 affects CCleaner 3.26.0.1988 through 5.02.5101. The root cause is that CCleaner overwrites files and, in the process, writes filenames to disk, enabling local users to recover sensitive information from unallocated disk space. KoreLogic’s advisory provides a d...

PT-2015-6381

Name of the Vulnerable Software and Affected Versions Piriform CCleaner versions 3.26.0.1988 through 5.02.5101 Description The issue allows local users to obtain sensitive information by searching unallocated disk space because filenames are written to disk when overwriting files. Recommendations...

CVE-2015-3999: Exposure of Sensitive Information to an Unauthorized Actor

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space...

CXF: Large invalid content could cause temporary space to fill

It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of dis...

CXF: Large invalid content could cause temporary space to fill

It was found that when a large invalid SOAP message was processed by Apache CXF, it could be saved to a temporary file in the /tmp directory. A remote attacker could send a specially crafted SOAP message that, when processed by an application using Apache CXF, would use an excessive amount of dis...

[SECURITY] Fedora 21 Update: glibc-2.20-8.fc21

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 20 Update: glibc-2.18-19.fc20

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...