CVE-2015-3238

The CVE affects the Linux-PAM pam_unix module. The _unix_run_helper_binary function, when it cannot access passwords directly, can write to a blocking pipe, allowing local users to enumerate usernames or cause a denial of service (hang). This is documented for pam before version 1.2.1. Impact is ...

CVE-2015-4301

Cisco Nexus 9000 Series NX-OS (Nexus 9000 devices, 11.1(1c)) is affected by CVE-2015-4301. The issue allows a remote authenticated attacker to cause a denial of service (device hang) by copying large files to the device filesystem, via Bug CSCuu77225. Exploitation requires valid credentials and t...

CVE-2015-4301

Cisco NX-OS on Nexus 9000 devices 11.11c allows remote authenticated users to cause a denial of service device hang via large files that are copied to a device's filesystem, aka Bug ID CSCuu77225...

PT-2015-2242

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on Nexus 9000 devices version 11.11c Description The issue is related to resource management errors in the NX-OS network operating system. It allows a remote authenticated user to cause a denial of service, resulting in a device...

CVE-2015-4301: Undefined Security Weakness

Cisco NX-OS on Nexus 9000 devices 11.11c allows remote authenticated users to cause a denial of service device hang via large files that are copied to a device's filesystem, aka Bug ID CSCuu77225...

PT-2015-2570

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.20 and earlier Description The issue is related to errors in the code of the Types subcomponent in the MySQL database management system. It allows a remote attacker to cause a denial of service. The vulnerability can ...

PT-2015-2495

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.5.44 and earlier Oracle MySQL Server versions 5.6.25 and earlier Description The issue is related to errors in the code of a subcomponent of the MySQL database management system, specifically the DML component...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2015-04986)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the TFTP server of Cisco IOS and IOS XE Software, which arises from a program that does not properly manage memory when processing TFTP requests. A remote attack...

CVE-2015-0681: Undefined Security Weakness

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

PT-2015-6470

Name of the Vulnerable Software and Affected Versions Cisco 9900 phones version 9.32 Description The issue is related to the packet-storing feature on Cisco 9900 phones, which does not properly support the RTP protocol. This allows remote attackers to cause a denial of service, resulting in a...

CVE-2015-4226: Undefined Security Weakness

The packet-storing feature on Cisco 9900 phones with firmware 9.32 does not properly support the RTP protocol, which allows remote attackers to cause a denial of service device hang by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976...

Debian DLA-155-1 : linux-2.6 security update

This update fixes the CVEs described below. A further issue, CVE-2014-9419, was considered, but appears to require extensive changes with a consequent high risk of regression. It is now unlikely to be fixed in squeeze-lts. CVE-2013-6885 It was discovered that under specific circumstances, a...

SuSE 11.3 Security Update : util-linux (SAT Patch Number 10452)

util-linux has been updated to fix one security issue : - command injection flaw in blkid bnc907434. Additionally, these non-security issues have been fixed :. CVE-2014-9114 - Fix possible script hang. bnc888678 - Enable build of libmount / findmnt. bnc900965 - Don't stop trying filesystem when...

CVE-2015-0654: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System IPS Software before 7.33E4 allows remote attackers to cause a denial of service process hang by establishing many HTTPS sessions, aka Bug ID CSCuq40652...

USN-2515-2: Linux kernel (Trusty HWE) vulnerabilities regression

USN-2515-1 fixed vulnerabilities in the Linux kernel. There was an unrelated regression in the use of the virtual counter CNTVCT on arm64 architectures. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A flaw was discovered in the Kernel Virtual...

CVE-2015-0887

The CVE-2015-0887 vulnerability affects SEIL Series routers (PPPD in PPP Access Concentrator, SSTP packet processing) and is triggered by specially crafted SSTP packets that cause an infinite loop, leading to a device hang (DoS). Affected products include SEIL/x86 Fuji (1.00–3.30), SEIL/X1 (3.50–...

MGASA-2015-0078 Updated kernel-vserver packages fix security vulnerabilities

This kernel-vserver update is based on upstream -longterm 3.14.32 and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a...

CVE-2015-0060

The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly scale fonts, which allows loc...

CVE-2015-0060

The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly scale fonts, which allows loc...

CVE-2015-0060: Undefined Security Weakness

The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly scale fonts, which allows loc...