privoxy -- multiple vulnerabilities

Privoxy Developers reports: Fixed a DoS issue in case of client requests with incorrect chunk-encoded body. When compiled with assertions enabled the default they could previously cause Privoxy to abort. Reported by Matthew Daley. CVE-2015-1380. Fixed multiple segmentation faults and memory leaks...

CVE-2014-9322

arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...

IRIX 6.5.x gr_osview Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1526/info Under certain versions of IRIX, the 'grosview' command contains a buffer overflow that local attackers can exploit to gain root privileges. The grosview command produces a graphical display of memory-management...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...

Updated kernel-vserver packages fix security vulnerability

This kernel update provides an update to the 3.10 longterm branch, currently 3.10.28 and fixes the following security issues: The ath9khtcsetbssidmask function in drivers/net/wireless/ath/ath9k/htcdrvmain.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC...

coreutils security, bug fix, and enhancement update

8.4-31.0.1 - clean up empty file if cp is failed Orabug 15973168 8.4-31 - adjust the fix for the du bindmounts failure836557 Mon Oct 07 2013 Ondrej Oprala - Fix su retvals once again 8.4-29 - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various segmentation faults in sort, uniq and join1015019...

Ruby: Ruby: Heap Overflow in Floating Point Parsing

Any time a string is converted to a floating point value, a specially crafted string can cause a heap overflow. This can lead to a denial of service attack via segmentation faults and possibly arbitrary code execution. Any program that converts input of unknown origin to floating point values...

ruby -- Heap Overflow in Floating Point Parsing

Ruby developers report: Any time a string is converted to a floating point value, a specially crafted string can cause a heap overflow. This can lead to a denial of service attack via segmentation faults and possibly arbitrary code execution. Any program that converts input of unknown origin to...

SuSE 11.2 / 11.3 Security Update : coreutils (SAT Patch Numbers 8334 / 8336)

This coreutils update fixes three minor security issues : - VUL-1: CVE-2013-0221: segmentation fault in 'sort -d' and 'sort -M' with long line input. bnc798538 - VUL-1: CVE-2013-0222: segmentation fault in 'uniq' with long line input. bnc796243 - VUL-1: CVE-2013-0223: segmentation fault in 'join...

Fedora 17 : coreutils-8.15-10.fc17 (2013-1804)

fix multiple segmantation faults in i18n patch by SUSE 869442, 902917- CVE2013-0223/CVE2013-0221/CVE2013-0222 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 18 : coreutils-8.17-8.fc18 (2013-1455)

fix multiple segmantation faults in i18n patch by SUSE 869442, 902917- CVE2013-0223/CVE2013-0221/CVE2013-0222 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

These updated kernel packages fix the following security issues : A flaw was found in the virtual filesystem VFS. A local unprivileged user could truncate directories to which they had write permission; this could render the contents of the directory inaccessible. CVE-2008-0001, Important A flaw...

kernel: thp: __split_huge_page() mapcount != page_mapcount BUG_ON()

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

kernel: thp: __split_huge_page() mapcount != page_mapcount BUG_ON()

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

CVE-2012-1179

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

Design/Logic Flaw

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

CVE-2012-1179

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages...

Xen DoS using IOMMU faults from PCI-passthrough guest

ISSUE DESCRIPTION A VM that controls a PCIE device directly can cause it to issue DMA requests to invalid addresses. Although these requests are denied by the IOMMU, the hypervisor needs to handle the interrupt and clear the error from the IOMMU, and this can be used to live-lock a CPU and...

Mandriva Update for libalsa2 MDVA-2010:227 (libalsa2)

Check for the Version of libalsa2 OpenVAS Vulnerability Test Mandriva Update for libalsa2 MDVA-2010:227 libalsa2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:227 : libalsa2

This is a bugfix and maintenance update bundle that addresses various issues in a number of packages. Some thread-related problems were found in the libalsa2 library that could cause segmentation faults in some audio applications one example being phonon when used with gstreamer output and...