SuSE 11.3 Security Update : kvm and libvirt (SAT Patch Number 10222)

This collective update for KVM and libvirt provides fixes for security and non-security issues. kvm : - Fix NULL pointer dereference because of uninitialized UDP socket. bsc897654, CVE-2014-3640 - Fix performance degradation after migration. bsc878350 - Fix potential image corruption due to missi...

Scientific Linux Security Update : shim on SL7.x x86_64 (20141104)

A heap-based buffer overflow flaw was found the way shim parsed certain IPv6 addresses. If IPv6 network booting was enabled, a malicious server could supply a crafted IPv6 address that would cause shim to crash or, potentially, execute arbitrary code. CVE-2014-3676 An out-of-bounds memory write...

CentOS 5 : kernel (CESA-2015:0164)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Cisco Unified IP Phones 9900 Series Local Denial of Service Vulnerability (CNVD-2015-00920)

Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. A security vulnerability exists in the Cisco Unified IP Phone 9900 Series. A local attacker could exploit this vulnerability to cause a denial of service...

RHEL 6 : kernel (RHSA-2015:0115)

Updated kernel packages that fix three security issues are now available for Red Hat Enterprise Linux 6.2 Advanced Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS 7 : kernel (CESA-2015:0102)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

GHOST glibc Vulnerability Affects WordPress and PHP applications

After the disclosure of extremely critical GHOST vulnerability in the GNU C library glibc — a widely used component of most Linux distributions, security researchers have discovered that PHP applications, including the WordPress Content Management System CMS, could also be affected by the bug...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2015:0102 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...

Remote let the phone restart count as vulnerability? At least Google says not to count-vulnerability warning-the black bar safety net

Security researchers recently announced about the Android WiFi-Direct vulnerabilities, the vulnerability can lead to Android device reboot. Google and the vulnerability is found above the Core Security of the company has been in debate about this Android vulnerability severity--in the end let the...

Scientific Linux Security Update : kernel on SL6.x i386/srpm/x86_64 (20150127)

A flaw was found in the way the Linux kernel's SCTP implementation validated INIT chunks when performing Address Configuration Change ASCONF. A remote attacker could use this flaw to crash the system by sending a specially crafted SCTP packet to trigger a NULL pointer dereference on the system...

RHEL 6 : kernel (RHSA-2015:0087)

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Critical: glibc

Issue Overview: A heap-based buffer overflow was found in glibc's nsshostnamedigitsdots function, which is used by the gethostbyname and gethostbyname2 glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code...

Amazon Linux AMI : glibc (ALAS-2015-473)

A heap-based buffer overflow was found in glibc's nsshostnamedigitsdots function, which is used by the gethostbyname and gethostbyname2 glibc function calls. A remote attacker able to make an application call to either of these functions can use this flaw to execute arbitrary code with the...

Android Wi-Fi Direct Vulnerability Lets Hackers to Kick your Devices OFF

Security researchers from Core Security has reportedly found a Denial of Service DoS attack vulnerability in Android WiFi-Direct. Android's WiFi-Direct is a wireless technology that allows two devices to establish a direct, peer-to-peer Wi-Fi connection without requiring a wireless router...

Unspecified Vulnerability in ADB P.DGA4001N Router

The ADB formerly Pirelli Broadband Solutions P.DGA4001N is an ADSL wireless router product from ADB Switzerland. A security vulnerability exists in the ADB P.DGA4001N router. Because the program failed to properly restrict access to the web interface. A remote attacker can exploit this...

Siemens Scalance X Switches 'HTTP' Request Denial of Service Vulnerability

Siemens Scalance X Switches are switching devices developed by Siemens. The Siemens Scalance X Switches 'HTTP' request denial of service vulnerability allows an attacker to reboot the affected device and deny service to legitimate users...

Siemens Scalance X Switches Denial of Service Vulnerability

Siemens Scalance X Switches are switching devices developed by Siemens. A denial of service vulnerability exists in Siemens Scalance X Switches, which allows an attacker to reboot the affected device and deny service to legitimate users...

CVE-2014-8479

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

CVE-2014-8479

The CVE-2014-8479 entry affects Siemens SCALANCE X-300 switches (and X-408) with firmware before 4.0, where the FTP server component can be abused by remote authenticated users to trigger a reboot (DoS) via specially crafted FTP packets. Root cause centers on the FTP server handling of crafted tr...