Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2844-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2844-1 advisory. Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2842-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2842-2 advisory. Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2841-2)

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 Guoyong Gang discovered th...

Ubuntu 15.10 : linux vulnerabilities (USN-2843-1)

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 Guoyong Gang discovered th...

Ubuntu 15.04 : linux vulnerabilities (USN-2842-1)

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 Guoyong Gang discovered th...

Debian DLA-360-1 : linux-2.6 security update

This update fixes the CVEs described below. CVE-2013-7446 Dmitry Vyukov discovered that a particular sequence of valid operations on local AFUNIX sockets can result in a use-after-free. This may be used to cause a denial of service crash or possibly for privilege escalation. CVE-2015-7799...

openSUSE Security Update : ppp (openSUSE-2015-827)

The ppp package was updated to fix one security issue. - CVE-2015-3310: Fixed buffer overflow in radius plug-ins rcmksid bnc927841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Cisco IOS Virtual PPP Interfaces Security Bypass

The remote Cisco device is affected by a security bypass vulnerability due to physical-interface ACLs superseding virtual PPP interface ACLs. An authenticated, remote attacker connected to an authenticated PPP session can exploit this to bypass intended network-traffic restrictions. C Tenable...

Cisco IOS Virtual PPP ACL控制绕过漏洞

No description provided by source...

CVE-2015-6365

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

Design/Logic Flaw

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

Cisco IOS Software Virtual PPP Interfaces Security Bypass Vulnerability

A vulnerability in Cisco devices that are running Cisco IOS Software Release 15.204M or Cisco IOS Software Release 15.403M and are configured to use access control lists ACLs could allow a user who is connected to an authenticated PPP session to bypass ACLs that are configured on virtual PPP...

CVE-2006-5749

The isdnpppccpresetallocstate function in drivers/isdn/isdnppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the inittimer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash...

UBUNTU-CVE-2015-7799

The slhcinit function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted PPPIOCSMAXCID ioctl call...

A comprehensive study of Huawei 3G routers - XSS, CSRF, DoS, unauthenticated firmware update, RCE

Hello, Please find a text-only version below sent to security mailing-lists. The html version on analysing the vulnerabilities in Huawei 3G routers is posted here: https://pierrekim.github.io/blog/2015-10-07-Huawei-routers-vulnerable-to-multiple-threats.html === text-version of the advisory ===...

Huawei 3G Routers CSRF / DoS / Bypass / Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Huawei 3G routers vulnerable to multiple threats Advisory URL: https://pierrekim.github.io/advisories/2015-huawei-0x00.txt Blog URL:...

Gentoo Security Advisory GLSA 201412-19

Gentoo Linux Local Security Checks GLSA 201412-19 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation

Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation Vendor Website : http://www.sonicwall.com INDEX --------------------------------------- 1. CVE 2. Background 3. Description 4. Affected Products 5. Solution 6. Credit 7. Disclosure Timeline 1. CVE...

Ubuntu 14.04 LTS : ppp vulnerability (USN-2595-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2595-1 advisory. It was discovered that ppp incorrectly handled large PIDs. When pppd is used with a RADIUS server, a remote attacker could use this issue to cause it to crash,...

Ubuntu: Security Advisory (USN-2595-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...