USN-3161-3 linux-raspi2 vulnerabilities

Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to expose sensitive information kernel memory. CVE-2015-8964 It was discovered that the Video For Linux Two v4l2 implementation in the Linux kernel d...

Error: "SSL Error 61: You have not chosen to trust 'Certificate Authority'..." on Receiver for Linux

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information For Firefox certificate...

Symantec Decomposer Engine Multiple Parsing Vulnerabilities

SUMMARY Symantec is aware of buffer overflow and memory corruption findings in the AntiVirus Decomposer engine used in various configurations by multiple Symantec products. FAQ on Impact to Symantec Products: AFFECTED PRODUCTS Affected Enterprise Products Product | Version | Solutions ---|---|---...

PT-2016-2255 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.242 and earlier Description: The issue is related to errors in the code of Flash Player and Flash Player for Linux, which can be exploited by a remote attacker to impact the integrity, availability, and...

PT-2016-2242

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.242 and earlier Description The issue is related to unspecified errors in the code of Flash Player and Flash Player for Linux, which can be exploited by a remote attacker to impact the integrity, availability...

PT-2016-2251

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.242 and earlier Description The issue is related to errors in the code of Flash Player and Flash Player for Linux. It may allow a remote attacker to impact the integrity, availability, and confidentiality of...

PT-2016-2237

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.242 and earlier Description The issue is related to unspecified vulnerabilities in the code of Flash Player and Flash Player for Linux, which can be exploited by a remote attacker to impact the integrity,...

PT-2016-2238

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.242 and earlier Description The issue is related to errors in the code of Flash Player and Flash Player for Linux. It may allow a remote attacker to impact the integrity, availability, and confidentiality of...

CVE-2016-2481

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

UBUNTU-CVE-2016-4568

drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service kernel memory write operation or possibly have unspecified other impact via a crafted number of planes in a VIDIOCDQBUF ioctl call...

Compaq/Hewlett Packard Glance 11.00 Privilege Escalation Vulnerability

It has been identified that binaries that are executed with elevated privileges SetGID and SetUID programs in Compaq/HP's Glance for Linux have been compiled in manner that means they searched for libraries in insecure locations. Versions 11.00 and below are affected. Vulnerability title:...

Compaq/Hewlett Packard Glance 11.00 Privilege Escalation

Vulnerability title: SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH in Compaq/Hewlett Packard Glance for Linux CVE: CVE-2014-2630 Vendor: Compaq/Hewlett Packard Product: Glance for Linux Affected version: 11.00 and subsequent Fixed version: HPSBMU03086 rev.3 Reported by: Tim...

PT-2014-4671

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus for Linux versions prior to 9.6.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web UI. These vulnerabilities allow local users to inject arbitrary web script or HTML via specific...

CVE-2014-2385: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the 1 newListList:ExcludeFileOnExpression, 2 newListList:ExcludeFilesystems, or 3 newListList:ExcludeMountPaths parameter to...

Skype for Linux <= 2.1 Beta - Multiple Strange Behavior

No description provided by source. Title: Skype for Linux =2.1 Beta multiple strange behavior Author: Emanuele Gentili Emgent, Emanuele Acri Crossbower Contacts: [email protected], [email protected] Published: 2010-01-04 Software Link: http://www.skype.com/intl/it/download/skype/linux/...

PT-2014-2185

Name of the Vulnerable Software and Affected Versions SNARE for Linux agent versions prior to 1.7.0 Description A cross-site scripting XSS issue exists in the events page of the SNARE for Linux agent, allowing remote attackers to inject arbitrary web script or HTML via a logged shell command. Thi...

PT-2014-3697

Name of the Vulnerable Software and Affected Versions Novell Client for Linux in Novell Open Enterprise Server OES 11 Linux SP2 Description The issue arises from improper management of a certain array by the /opt/novell/ncl/bin/nwrights in Novell Client for Linux. This allows local users to obtai...

CVE-2014-0595: Improper Restriction of Operations within the Bounds of a Memory Buffer

/opt/novell/ncl/bin/nwrights in Novell Client for Linux in Novell Open Enterprise Server OES 11 Linux SP2 does not properly manage a certain array, which allows local users to obtain the S permission in opportunistic circumstances by leveraging the granting of the F permission by an administrator...

Fedora Update for samba FEDORA-2013-14355

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2013-14355 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Fedora Update for samba FEDORA-2013-1654

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2013-1654 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...