39 matches found
Fedora 25 : pacemaker (2016-c1cbcc4528)
Security fix for CVE-2016-7035 improper IPC guarding Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
Fedora 24 : pacemaker (2016-242ff9a2fa)
Security fix for CVE-2016-7035 improper IPC guarding Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
USN-2985-2: GNU C Library regression
USN-2985-1 fixed vulnerabilities in the GNU C Library. The fix for CVE-2014-9761 introduced a regression which affected applications that use the libm library but were not fully restarted after the upgrade. This update removes the fix for CVE-2014-9761 and a future update will be provided to...
Ubuntu 14.04 LTS : GNU C Library vulnerabilities (USN-2985-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2985-1 advisory. Martin Carpenter discovered that ptchown in the GNU C Library did not properly check permissions for tty files. A local attacker could use this to gain...
USN-2985-1: GNU C Library vulnerabilities
Martin Carpenter discovered that ptchown in the GNU C Library did not properly check permissions for tty files. A local attacker could use this to gain administrative privileges or expose sensitive information. CVE-2013-2207, CVE-2016-2856 Robin Hack discovered that the Name Service Switch NSS...
SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2016:0471-1)
This update for glibc fixes the following security issues : - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses bsc961721 - CVE-2015-8777: Insufficient checking of LDPOINTERGUARD...
CVE-2015-8777
The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...
CVE-2015-8777
The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...
Null pointer dereference
The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...
CVE-2015-8777
The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...
CVE-2015-8777
The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...
CVE-2015-8777
CVE-2015-8777 is a local, environment-variable–driven bypass of the glibc pointer-guarding mechanism. The flaw exists in the GNU C Library (glibc) prior to version 2.23, where the LD_POINTER_GUARD environment variable was not ignored for privileged executions, allowing a local attacker to bypass ...
CVE-2015-8777
The processenvvars function in elf/rtld.c in the GNU C Library aka glibc or libc6 before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LDPOINTERGUARD environment variable...
openSUSE Security Update : glibc (openSUSE-2015-944)
glibc was updated to fix one minor security issue and two bugs. The following vulnerability was fixed : - boo950944: pointer guarding weakness The following bugs were fixed : - boo955644: resource leak in resolver - boo936251: bits/time.h misses CLOCKTAI that is present in linux/time.h...
DLA-316-1 eglibc - security update
Bulletin has no description...
CVE-2011-2395
The Neighbor Discovery ND protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement RA message is contained in the second fragment, as demonstrated b...
Authentication flaw
The Neighbor Discovery ND protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement RA message is contained in the second fragment, as demonstrated b...
CVE-2011-2395
The CVE-2011-2395 vulnerability affects Cisco IOS with an ND (Neighbor Discovery) implementation on unspecified switches. It allows remote attackers to bypass Router Advertisement Guarding by sending fragmented IPv6 packets where the Router Advertisement (RA) is contained in the second fragment. ...
