SUSE SLES15 Security Update : spice (SUSE-SU-2019:0242-1)

This update for spice fixes the following issues : Security issue fixed : CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Non-security issue fixed: Include spice-server tweak to compensate for performance...

Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before running it... I guess I could have included it as ...

Microsoft Windows - Windows Error Reporting Local Privilege Escalation

Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before running it... I guess I could have included it as a resource in the exe.. but whatever. Example: "angrypolarbearbug.exe c:\windows\system32\drivers\pci.sys" This will overwrite pci.sys...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2018:4194-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. CVE-2017-5732: Fixed privilege...

openSUSE: Security Advisory for rpm (openSUSE-SU-2018:3373-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : bash (SUSE-SU-2018:1398-2)

This update for bash fixes the following issues : Security issues fixed : CVE-2016-7543: A code execution possibility via SHELLOPTS+PS4 variable was fixed bsc1001299 CVE-2016-0634: Arbitrary code execution via malicious hostname was fixed bsc1000396 Non-security issues fixed: Fix repeating...

CVE-2017-13103

CVE-2017-13103 entry is rejected/not used and does not represent an active vulnerability.

SUSE-SU-2018:0874-1 Security update for glibc

This update for glibc fixes the following issues: Security issues fixed: - CVE-2017-12133: Avoid use-after-free read access in clntudpcall bsc1081556 Non security issue fixed: - Fix incorrect getaddrinfo assertion trigger bsc1076871...

SUSE-SU-2018:0575-1 Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP2)

This update for the Linux Kernel 4.4.74-9229 fixes several issues. The following security issue was fixed: - CVE-2017-18075: crypto/pcrypt.c in the Linux kernel mishandled freeing instances, allowing a local user able to access the AFALG-based AEAD interface CONFIGCRYPTOUSERAPIAEAD and pcrypt...

SUSE SLES11 Security Update : glibc (SUSE-SU-2018:0565-1)

This update for glibc fixes the following issues: Security issues : - CVE-2017-8804: Fix memory leak after deserialization failure in xdrbytes, xdrstring bsc1037930 - CVE-2017-12132: Reduce EDNS payload size to 1200 bytes bsc1051791 - CVE-2018-6485,CVE-2018-6551: Fix integer overflows in internal...

CVE-2013-1936

CVE-2013-1936 entry is rejected/not used and does not represent an active vulnerability.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2017-17781

CVE-2017-17781 entry rejected; not an active security issue.

CVE-2017-15791

CVE-2017-15791 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

openSUSE Security Update : samba (openSUSE-2017-1147)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624 - CVE-2017-12150: Always enforce smb signing when it is configured...

CVE-2017-15070

This CVE-2017-15070 entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-2017-15066

CVE-2017-15066 entry is rejected/not used and does not represent an active vulnerability.

SUSE-SU-2017:1777-1 Security update for freeradius-server

This update for freeradius-server fixes the following issues: - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. bnc1041445 - CVE-2015-4680: Add a configuration option to allow checking of all intermediate certificates for revocations. bnc935573 The...

CVE-2016-2553

CVE-2016-2553 is rejected/not used; the CNA withdrew the candidate and it is not a security issue.

openSUSE Security Update : postgresql94 (openSUSE-2016-1161)

This update for postgresql94 to version 9.4.9 fixes the several issues. These security issues were fixed : - CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference bsc993454. - CVE-2016-5424: Fix client programs' handling of special characters in database and role names...