USN-1808-1: Linux kernel (EC2) vulnerabilities

Mathias Krause discovered an information leak in the Linux kernel's getsockname implementation for Logical Link Layer llc sockets. A local user could exploit this flaw to examine some of the kernel's stack memory. CVE-2012-6542 Mathias Krause discovered information leaks in the Linux kernel's...

VMware ESXi/ESX patches resolve multiple security issues (VMSA-2010-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2010-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware Products 'vmware-vmx' Information Disclosure Vulnerability (VMSA-2010-0007) - Windows

VMware products are prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

VMware Products 'vmware-vmx' Information Disclosure Vulnerability (VMSA-2010-0007) - Linux

VMware products are prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Stack overflow

The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Player 2.5.x before 2.5.4 build 246459 on Windows, VMware ACE 2.6 before 2.6.1 build 227600 and 2.5....

CVE-2009-3164

CVE-2009-3164 affects Sun Solaris 10 and OpenSolaris (SNV 01–82, 111–122) when using a Cassini GigaSwift Ethernet Adapter. It is a consequence of an incomplete fix for CVE-2009-2136 in the IPv6/TCP-IP stack, enabling remote attackers to trigger a denial of service (kernel panic) via jumbo frames....

security flaw

net/ipv4/netfilter/ipconntrackcore.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nfconntrackl3protoipv4.c in 2.6, does not clear sockaddrin.sinzero before returning IPv4 socket names from the getsockopt function with SOORIGINALDST, which allows local users to obtain portions of...