Security Bulletin: Vulnerabilities in rabbitmq-server affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in rabbitmq-server. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8786 DESCRIPTION: RabbitMQ is vulnerable to a denial of service, caused by an error in the Management plugin. By sending a specially crafted...

Security Bulletin: Vulnerabilities in GStreamer affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GStreamer. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9634 DESCRIPTION: GStreamer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the flxdecodedeltafli function in...

Security Bulletin: Vulnerabilities in Spice affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Spice. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-9577 DESCRIPTION: Spice is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by mainchannelallocmsgrcvbuf function. By sending...

Security Bulletin: A vulnerability in BIND affects PowerKVM

Summary PowerKVM is affected by a vulnerability in ISC BIND. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-3135 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error when using both DNS64 and RPZ to rewrite query responses. A remote...

Security Bulletin: Vulnerabilities in TigerVNC affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in TigerVNC. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2014-8240 DESCRIPTION: TigerVNC is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the MallocFrameBuffer function in vncviewer.c...

Security Bulletin: A vulnerability in policycoreutils affects PowerKVM

Summary PowerKVM is affected by a vulnerability in policycoreutils. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-7545 DESCRIPTION: Policycoreutils could allow a remote attacker to execute arbitrary commands on the system, caused by a TIOCSTI ioctl attack in the...

Security Bulletin: A vulnerability in GnuPG (gpg) affects PowerKVM

Summary PowerKVM is affected by a vulnerability in GnuPG gpg. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-6313 DESCRIPTION: GnuPG could provide weaker than expected security, caused by an error in the mixing functions when obtaining 4640 bits from the random...

Security Bulletin: A vulnerability in nettle affects PowerKVM

Summary PowerKVM is affected by a vulnerability in nettle. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-6489 DESCRIPTION: Nettle could allow a remote attacker to obtain sensitive information, caused by a cache-related side channel attack in the RSA and DSA...

Security Bulletin: Vulnerabilities in sudo affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in sudo. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-7032 DESCRIPTION: Sudo could allow a local authenticated attacker to execute arbitrary commands on the system, caused by the bypass of the sudo noexec...

Security Bulletin: A vulnerability in wget affects PowerKVM

Summary PowerKVM is affected by a vulnerability in wget. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-4971 DESCRIPTION: GNU wget could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted HTTP redirect message...

Security Bulletin: Vulnerabilities in PHP affect PowerKVM

Summary PowerKVM is affected by numerous vulnerabilities in PHP. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-5399 DESCRIPTION: PHP could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write in the bzread function...

Security Bulletin: A vulnerability in DHCP affects PowerKVM (CVE-2016-5410)

Summary PowerKVM is affected by a vulnerability in the ISC DHCP Daemon. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-2774 DESCRIPTION: ISC DHCP is vulnerable to a denial of service, caused by the failure to limit the number of open TCP connections to the ports f...

Security Bulletin: A vulnerability in lighttpd affects PowerKVM (CVE-2016-1000212)

Summary PowerKVM is affected by a vulnerability in lighttpd. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-1000212 DESCRIPTION: lighttpd could allow a remote attacker to redirect HTTP traffic of CGI application, caused by the failure to protect applications from...

Security Bulletin: A vulnerability in PHP affects PowerKVM (CVE-2016-5385)

Summary PowerKVM is affected by a vulnerability in PHP. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-5385 DESCRIPTION: PHP could allow a remote attacker to redirect HTTP traffic of CGI application, caused by the failure to protect applications from the presence ...

Security Bulletin: A vulnerability in NRPE affects PowerKVM (CVE-2014-2913)

Summary PowerKVM is affected by a vulnerability in the Nagios Remote Plugin Executor NRPE. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2014-2913 DESCRIPTION: Nagios Remote Plugin Executor NRPE could allow a remote attacker to execute arbitrary code on the system,...

Security Bulletin: A vulnerability in the Apache HTTP Server affects PowerKVM (CVE-2016-5387)

Summary PowerKVM is affected by a vulnerability in the Apache HTTP Server httpd. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-5387 DESCRIPTION: Apache HTTP Server could allow a remote attacker to redirect HTTP traffic of CGI application, caused by the lack of protection ...

Security Bulletin: A vulnerability in the Linux kernel affects PowerKVM (CVE-2016-3044)

Summary PowerKVM is affected by a denial of service DoS vulnerability in the Linux kernel. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-3044 DESCRIPTION: There is a denial of service vulnerability in KVM on Power where a guest can cause a host CPU to hang, spinning in an...

Security Bulletin: Vulnerabilities in ISC Bind affect PowerKVM (CVE-2016-1285, CVE-2016-1286)

Summary PowerKVM is affected by vulnerabilities in ISC Bind. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-1286 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error when parsing signature records for DNAME resource records. A remote attacker...

Security Bulletin: Multiple vulnerabilities in Python affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in Python. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2013-1752 DESCRIPTION: Python SSL module is vulnerable to denial of service, caused by an unlimited readline function call. A remote attacker could exploit this...

Security Bulletin: Vulnerability in GNU Grep affects PowerKVM (CVE-2015-1345)

Summary PowerKVM is affected by a vulnerability in GNU Grep. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-1345 DESCRIPTION: GNU grep is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by an error in kwset.c. A remote attacker could overflow...