USN-2848-1 linux vulnerabilities

Felix Wilhelm discovered a race condition in the Xen paravirtualized drivers which can cause double fetch vulnerabilities. An attacker in the paravirtualized guest could exploit this flaw to cause a denial of service crash the host or potentially execute arbitrary code on the host. CVE-2015-8550...

PT-2015-7802

Name of the Vulnerable Software and Affected Versions Xen versions 3.1.x through 4.3.x Description The issue allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service by consuming disk space. This can be achieved by leveraging a system with...

Adobe Flash Player and AIR ASLR Protection Mechanism Bypass Vulnerability

FlashPlayer is a multimedia program player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. Some versions of Adobe Flash Player and AIR have a security vulnerabilit...

Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability

Secure Data Space version 3.1.1-2 suffers from a cross site scripting vulnerability. Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability 1. DETAILS - ---------- Product: SECURE DATA SPACE Vendor URL: www.ssp-europe.eu Type: Cross-site ScriptingCWE-79 Date found: 2015-09-30 Date published...

Apple OS X ASLR Protection Bypass Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X has a security vulnerability that allows attackers to exploit vulnerabilities to bypass ASLR protection...

Secure Data Space 3.1.1-2 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 secunet Security Networks AG Security Advisory Advisory: SECURE DATA SPACE API Multiple Non-Persistent Cross-Site Scripting Vulnerabilities 1. DETAILS - ---------- Product: SECURE DATA SPACE Vendor URL: www.ssp-europe.eu Type: Cross-site...

Microsoft Silverlight Security Mechanism Bypass Vulnerability

Microsoft Silverlight is a cross-browser, cross-platform .NET implementation for building media experiences and interactive applications for the Web. A security mechanism bypass vulnerability exists in Microsoft Silverlight that allows remote attackers to pass through the ASLR protection mechanis...

UBUNTU-CVE-2015-8540

Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG...

Microsoft Browser ASLR Bypass Vulnerability

Microsoft Internet Explorer and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that comes with operating systems before Windows 10. The latter is the default browser that comes with the latest operating system, Windows 10. A...

PT-2015-3014

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 7 through 11 Microsoft Edge Description A security feature bypass exists when Microsoft Edge and Internet Explorer fail to use the Address Space Layout Randomization ASLR security feature, allowing an...

PT-2015-2907

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.x through 4.6.x Description The issue is related to the libxl toolstack library in Xen, which does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process...

[SECURITY] Fedora 23 Update: glibc-2.22-6.fc23

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Understanding Garbage Collection and Coalesce Process Troubleshooting

Summary In most cases, customers have experienced issues with coalescing snapshots after deleting snapshots. At times we do notsee the reclaimed space once a snapshot is deleted. Even with an SR rescan to manually get the Garbage Collection GC to kick-in does not reclaim space. This article...

Internet Explorer Microsoft Edge ASLR Bypass

The vulnerability of Internet Explorer and Microsoft Edge is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially created website...

Windows OS KASLR Bypass

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to bypass the KASLR protection mechanism through a specially crafted application...

kernel: partial ASLR bypass through TLS base addresses leak

An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage TLS during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process...

kernel: partial ASLR bypass through TLS base addresses leak

An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage TLS during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process...

PT-2017-6652 · Openhpi +2 · Openhpi +2

Name of the Vulnerable Software and Affected Versions: OpenHPI versions prior to 3.6.0 Description: The issue allows local users to cause a denial of service due to disk consumption by filling the filesystem hosting /var/lib. This is possible because the /var/lib/openhpi directory has...

Microsoft Internet Explorer Security Mechanism Bypass Vulnerability

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A security mechanism bypass vulnerability exists in Microsoft Internet Explorer 9 through 11 and Microsoft Edge. It allows remote attackers to bypass the ASLR protection...

KLA10697 Multiple vulnerabilities in Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper memory objects access...