memcached security update

0:1.4.15-10.el73.1 - fix vulnerabilities allowing remote code execution CVE-2016-8704, CVE-2016-8705, CVE-2016-8706 0:1.4.15-10 - fix binding to IPv6 address 1298603 - enable SASL support 1263696 - don't allow authentication with bad SASL credentials CVE-2013-7239...

MGASA-2016-0374 Updated quagga packages fix security vulnerability

It was discovered that the zebra daemon in the Quagga routing suite suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages CVE-2016-1245...

Updated quagga packages fix security vulnerability

It was discovered that the zebra daemon in the Quagga routing suite suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages CVE-2016-1245...

Juniper JUNOSe IPv6 Packet Handling Line Card Reset Remote DoS (JSA10767) (deprecated)

According to its version, the remote Juniper E-eries device is affected by a denial of service vulnerability in the IPv6 support component due to improper handling IPv6 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted IPv6 packet, to cause the line card to...

RHEL 7 : kernel (RHSA-2016:2695)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2695 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: It was found that the Linux kernel's IPv6...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RedHat Update for kernel RHSA-2016:2574-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: IPv6 connect causes DoS via NULL pointer dereference

A NULL pointer dereference flaw was found in the way the Linux kernel's network subsystem handled socket creation with an invalid protocol identifier. A local user could use this flaw to crash the system...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.

It was found that the Linux kernel's IPv6 implementation mishandled socket options. A local attacker could abuse concurrent access to the socket options to escalate their privileges, or cause a denial of service use-after-free and system crash via a crafted sendmsg system call...

kernel: use-after-free via crafted IPV6 sendmsg for raw / tcp / udp / l2tp sockets.

It was found that the Linux kernel's IPv6 implementation mishandled socket options. A local attacker could abuse concurrent access to the socket options to escalate their privileges, or cause a denial of service use-after-free and system crash via a crafted sendmsg system call...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Cisco Meeting Server Buffer Underflow Vulnerability

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco Meeting Server and Meeting App Buffer Underflow Vulnerability

A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability exists because the software does not perform sufficient boundary checks on user-supplied data. An unauthenticated, remote...

New IoT Botnet Malware Borrows From Mirai

Researchers have thrown back the covers on more malware infecting IoT devices for the purposes of building a botnet that carries out DDoS attacks. This sample has its roots in other IoT botnets such as Aidra, Bashlite and Mirai in that it attacks weak telnet credentials guarding devices and it’s...

openSUSE Security Update : quagga (openSUSE-2016-1233)

This update for quagga fixes the following issue : - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code. bsc1005258. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE: Security Advisory for quagga (openSUSE-SU-2016:2646-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos IPv6 Packet Handling Remote DoS (JSA10762)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the IPV6 implementation. An unauthenticated, remote attacker can exploit this, via a flood of specially crafted IPv6 traffic, to exhaust available...

Security update for quagga (important)

This update for quagga fixes the following issue: - CVE-2016-1245: Fix for a zebra stack overrun in IPv6 RA receive code. bsc1005258...

Ubuntu 14.04 LTS / 16.04 LTS : Quagga vulnerability (USN-3110-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3110-1 advisory. David Lamparter discovered that Quagga incorrectly handled certain IPv6 router advertisements. A remote attacker could possibly use this issue to caus...