Oracle Linux 5 : kernel (ELSA-2009-1193)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1193 advisory. - fs ecryptfs: check tag 11 packet literal data buffer size Eric Sandeen 512862 512863 CVE-2009-2406 - fs ecryptfs: check tag 3 packet encrypted key si...

TrueType Font Exploits Gateway to Kernel Attacks

Font-parsing vulnerabilities weren’t part of the security consciousness much until the discovery of Duqu at the end of 2011. The spy malware hooked into the Windows kernel through bugs in the TrueType font file parsing engine, and not only breathed new life into the concept of cyber espionage, bu...

Mandriva Linux Security Advisory : kernel (MDVSA-2013:176)

Multiple vulnerabilities has been found and corrected in the Linux kernel : The scmsetcred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application...

Debian Security Advisory DSA 2669-1 (linux - privilege escalation/denial of service/information leak)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-0160 vladz reported a timing leak with the /dev/ptmx...

USN-1796-1: Linux kernel vulnerabilities

Andrew Jones discovered a flaw with the xeniret function in Linux kernel's Xen virtualizeation. In the 32-bit Xen paravirt platform an unprivileged guest OS user could exploit this flaw to cause a denial of service crash the system or gain guest OS privilege. CVE-2013-0228 Emese Revfy discovered...

[USN-1767-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1767-1 March 18, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1768-1)

Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...

USN-1768-1: Linux kernel (Quantal HWE) vulnerabilities

Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...

Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1083-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

AIX 5.3 TL 7 : kernel (IZ11820)

There are multiple vulnerabilities in the AIX kernel : a A 64-bit process that is restarted via the checkpoint and restart feature will gain read and write access to certain areas of kernel memory, resulting in execution of arbitrary code. Track with the following APAR numbers: IZ16992, IZ17111,...

AIX 5.2 TL 0 : kernel (IZ16992)

There are multiple vulnerabilities in the AIX kernel : a A 64-bit process that is restarted via the checkpoint and restart feature will gain read and write access to certain areas of kernel memory, resulting in execution of arbitrary code. Track with the following APAR numbers: IZ16992, IZ17111,...

RHEL 6 : kernel (RHSA-2012:1042)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1042 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

Ubuntu Update for linux-lts-backport-oneiric USN-1678-1

Ubuntu Update for Linux kernel vulnerabilities USN-1678-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16781.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-lts-backport-oneiric USN-1678-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu Update for linux-ti-omap4 USN-1673-1

Ubuntu Update for Linux kernel vulnerabilities USN-1673-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16731.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1673-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

Unbreakable Enterprise kernel security update

2.6.39-300.17.3 - mm/hotplug: correctly add new zone to all other nodes zone lists Jiang Liu Orabug: 16020976 Bug-db: 14798 CVE-2012-5517 - Divide by zero in TCP congestion control Algorithm. Jesper Dangaard Brouer Orabug: 16020656 Bug-db: 14798 CVE-2012-4565 - Fix length of buffer copied in...

Ubuntu Update for unity-firefox-extension USN-1665-1

Ubuntu Update for Linux kernel vulnerabilities USN-1665-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16651.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for unity-firefox-extension USN-1665-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu Update for linux-ec2 USN-1664-1

Ubuntu Update for Linux kernel vulnerabilities USN-1664-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16641.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ec2 USN-1664-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu Update for linux USN-1660-1

Ubuntu Update for Linux kernel vulnerabilities USN-1660-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16601.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1660-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

RHEL 5 : kernel (RHSA-2012:1540)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1540 advisory. - kernel: rds-ping cause kernel panic CVE-2012-2372 - kernel: net: slab corruption due to improper synchronization around inet-opt...

Ubuntu Update for mozilla-devscripts USN-1430-5

Ubuntu Update for Linux kernel vulnerabilities USN-1430-5 OpenVAS Vulnerability Test $Id: gbubuntuUSN14305.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for mozilla-devscripts USN-1430-5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...