Ubuntu 9.10 : linux, linux-ec2 vulnerabilities (USN-1073-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

Ubuntu: Security Advisory (USN-1073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1073-1: Linux kernel vulnerabilities

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Jacobson discovered that ThinkPad video output was not correctly...

kernel security and bug fix update

2.6.18-238.1.1.0.1.el5 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - net Enable...

Ubuntu 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1054-1)

Gleb Napatov discovered that KVM did not correctly check certain privileged operations. A local attacker with access to a guest kernel could exploit this to crash the host system, leading to a denial of service. CVE-2010-0435 Dan Rosenberg discovered that the Linux kernel TIPC implementation...

HP (OpenView Storage) Data Protector Manager DoS Vulnerability

HP OpenView Storage Data Protector Manager is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3433 / 3436 / 3445)

This update of the SUSE Linux Enterprise Server 11 SP1 kernel brings the kernel to 2.6.32.24 and fixes some critical security bugs and other non-security bugs. Following security bugs were fixed : - A iovec integer overflow in RDS sockets was fixed which could lead to local attackers gaining kern...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3462 / 3463)

This update of the SUSE Linux Enterprise Server 11 SP1 kernel brings the kernel to 2.6.32.24 and fixes some critical security bugs and other non-security bugs. Following security bugs were fixed : - A iovec integer overflow in RDS sockets was fixed which could lead to local attackers gaining kern...

Code injection

The RDS service rds.exe in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service crash via a packet with a large data size to TCP port 1530...

CVE-2011-0514

The RDS service rds.exe in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service crash via a packet with a large data size to TCP port 1530...

CVE-2011-0514

CVE-2011-0514 affects HP Data Protector Manager 6.11 RDS service (rds.exe). A remote attacker can crash the service by sending a oversized packet to TCP port 1530, causing a DoS. Public disclosures and PoC exist; a Metasploit auxiliary module implements the DoS. Remediation noted in at least one ...

PT-2011-2413

Name of the Vulnerable Software and Affected Versions HP Data Protector Manager version 6.11 Description The issue allows remote attackers to cause a denial of service, resulting in a crash of the RDS service, by sending a packet with a large data size to TCP port 1530. Recommendations For HP Dat...

CVE-2010-4446

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand...

CVE-2010-4446

Oracle Solaris 11 Express is listed as affected by CVE-2010-4446, with the vulnerability in the RDS and Kernel/InfiniBand subsystems that can allow local users to impact availability via unknown vectors. The CVE entry references an Oracle CPU advisory (CPU Jan-2011) that contains patches for mult...

PT-2011-1550

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Express Description The issue affects availability and is related to RDS and Kernel/InfiniBand. It can be exploited by local users via unknown vectors. Recommendations For Oracle Solaris version 11 Express, at the...

CVE-2010-4446: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand...

kernel: iovec integer overflow in net/rds/rdma.c

Integer overflow in the rdsrdmapages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service crash and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets RDS request, which triggers a buffer overflow...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2010-4175

Integer overflow in the rdscmsgrdmaargs function net/rds/rdma.c in Linux kernel 2.6.35 allows local users to cause a denial of service crash and possibly trigger memory corruption via a crafted Reliable Datagram Sockets RDS request, a different vulnerability than CVE-2010-3865...