Unbreakable Enterprise kernel security update

2.6.39-400.295.2 - nfsd: stricter decoding of write-like NFSv2/v3 ops J. Bruce Fields Orabug: 25986995 CVE-2017-7895 2.6.39-400.295.1 - ocfs2/o2net: o2netlistendataready should do nothing if socket state is not TCPLISTEN Tariq Saeed Orabug: 25510857 - IB/CORE: sync the resouce access in fmrpool...

DEBIAN-CVE-2017-6058

Buffer overflow in NetRxPkt::ehdrbuf in hw/net/netrxpkt.c in QEMU aka Quick Emulator, when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service out-of-bounds access and QEMU process crash via vectors related to VLAN stripping...

Multi Gigabit Packet Capturing: PFQ

PFQ is a functional networking framework designed for the Linux operating system that allows efficient packets capture/transmission 10G and beyond, in-kernel functional processing and packets steering across sockets/end-points. PFQ is highly optimized for multi-core architecture, as well as for...

Sanford Guide:Antimicrobial Rx - Dangerous filesystem permissions, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Sanford Guide:Antimicrobial Rx published at the 'play' market has multiple vulnerabilities...

Oracle Linux 6 : qemu-kvm (ELSA-2015-2694)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2694 advisory. - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch bz1287950 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2015-7762

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

Code injection

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

Code injection

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7763

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7763

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7762: Exposure of Sensitive Information to an Unauthorized Actor

rx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding of a data structure when constructing an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7763: Exposure of Sensitive Information to an Unauthorized Actor

rx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not properly initialize padding at the end of an Rx acknowledgement ACK packet, which allows remote attackers to obtain sensitive information by 1 conducting a replay attack or 2 sniffing the network...

CVE-2015-7198

CVE-2015-7198 is a buffer overflow in the ANGLE project’s rx::TextureStorage11 class, triggered by crafted texture data. It affects Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, enabling remote memory corruption and potential DoS or other impact. The issue arises from improper bou...

CVE-2015-7198: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted texture data...

PT-2015-2617

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 42.0 Mozilla Firefox ESR versions 38.x prior to 38.4 Description The issue is related to a buffer overflow in the rx::TextureStorage11 class, which can be exploited by a remote attacker. This exploitation can...

MGASA-2015-0424 Updated openafs packages fix security vulnerabilities

Updated openafs packages fix security vulnerabilities: When constructing an Rx acknowledgment ACK packet, Andrew-derived Rx implementations do not initialize three octets of data that are padding in the C language structure and were inadvertently included in the wire protocol CVE-2015-7762...

Updated openafs packages fix security vulnerabilities

Updated openafs packages fix security vulnerabilities: When constructing an Rx acknowledgment ACK packet, Andrew-derived Rx implementations do not initialize three octets of data that are padding in the C language structure and were inadvertently included in the wire protocol CVE-2015-7762...

PT-2015-7594

Name of the Vulnerable Software and Affected Versions OpenAFS versions 1.5.75 through 1.5.78 OpenAFS versions 1.6.x before 1.6.15 OpenAFS versions 1.7.x before 1.7.33 Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the networ...

PT-2015-7593

Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.6.15 OpenAFS versions 1.7.x prior to 1.7.33 Description The issue allows remote attackers to obtain sensitive information by conducting a replay attack or sniffing the network due to improper initialization of the...

openafs -- information disclosure

The OpenAFS development team reports: When constructing an Rx acknowledgment ACK packet, Andrew-derived Rx implementations do not initialize three octets of data that are padding in the C language structure and were inadvertently included in the wire protocol CVE-2015-7762. Additionally, OpenAFS ...