USN-1203-1: Linux kernel (Marvel DOVE) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

kernel: ksm: race between ksmd and exiting task

Race condition in the scangetnextrmapitem function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging KSM is enabled, allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted application...

RHEL 6 : kernel (RHSA-2011:1189)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1189 advisory. Security issues: Using PCI passthrough without interrupt remapping support allowed KVM guests to generate MSI interrupts and thus potentiall...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix several security issues, various bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

kernel: ksm: race between ksmd and exiting task

Race condition in the scangetnextrmapitem function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging KSM is enabled, allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted application...

PT-2011-3669 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39.3 Description: A race condition exists in the scan get next rmap item function in mm/ksm.c when Kernel SamePage Merging KSM is enabled. This issue allows local users to cause a denial of service,...

CVE-2008-7277

Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...

Google Chrome multiple vulnerabilities - February 11(Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb11win.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome multiple vulnerabilities - February 11Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...

Google Chrome multiple vulnerabilities - February 11(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb11lin.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome multiple vulnerabilities - February 11Linux Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...

CVE-2011-0781

Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors...

CVE-2011-0781

Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors...

CVE-2011-0781

Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors...

CVE-2011-0781

CVE-2011-0781 affects Google Chrome before 9.0.597.84, where autofill profile merging is not handled correctly. The description provided states an unspecified impact and remote attack vectors, but does not give concrete details on affected components beyond the autofill merging behavior. No expli...

Fedora Update for monotone FEDORA-2010-16902

Check for the Version of monotone OpenVAS Vulnerability Test Fedora Update for monotone FEDORA-2010-16902 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: monotone-0.48.1-1.fc14

monotone is a free, distributed version control system. It provides fully disconnected operation, manages complete tree versions, keeps its state in a local transactional database, supports overlapping branches and extensible metadata, exchanges work over plain network protocols, performs...

[SECURITY] Fedora 13 Update: monotone-0.48.1-1.fc13

monotone is a free, distributed version control system. It provides fully disconnected operation, manages complete tree versions, keeps its state in a local transactional database, supports overlapping branches and extensible metadata, exchanges work over plain network protocols, performs...

CVE-2010-2224

The snapshot merging functionality in Red Hat Enterprise Virtualization Manager aka RHEV-M before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a...

Design/Logic Flaw

The snapshot merging functionality in Red Hat Enterprise Virtualization Manager aka RHEV-M before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a...

CVE-2010-2224

CVE-2010-2224 affects Red Hat Enterprise Virtualization Manager (RHEV-M) prior to version 2.2. The issue is that the snapshot merging function does not properly pass the postzero parameter during operations on deleted volumes, which can allow a guest OS to read (inspecting) disk blocks belonging ...