[SECURITY] Fedora 30 Update: kernel-headers-5.1.8-300.fc30

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

The vulnerability of the Bouncy Castle cryptographic protection mechanism lies in the possibility of recovering unreliable data structures stored in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Bouncy Castle cryptographic protection lies in the recovery of unreliable data structures in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created personal key...

[SECURITY] Fedora 28 Update: kernel-headers-5.0.16-100.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

Use-After-Free

Linux kernel is vulnerable to use-after-free vulnerability. A local authenticated attacker is able gain privileges via crafted system calls that trigger mishandling of packetfanout data structures leading to a use-after-free flaw. This issue affects an unknown part of the file net/packet/afpacket...

The vulnerability of the Eclipse OpenJ9 virtual machine, related to the restoration of unreliable data structures in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Eclipse OpenJ9 virtual machine is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1475)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denia...

Information Disclosure

kernel-rt is vulnerable to information disclosure. The vulnerability exists as the net/dcb/dcbnl.c does not initialize certain structures...

Privilege Escalation

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Use-after-free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

Use-After-Free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

The vulnerability of the NumPy module for Python, which allows a hacker to execute arbitrary code

The vulnerability of the NumPy module for Python is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data structures in memory, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created query...

[SECURITY] Fedora 28 Update: kernel-headers-4.20.14-100.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

[SECURITY] Fedora 29 Update: kernel-headers-4.20.14-200.fc29

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so...

[SECURITY] Fedora 28 Update: kernel-headers-4.20.8-100.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

[SECURITY] Fedora 29 Update: kernel-headers-4.20.6-200.fc29

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

[SECURITY] Fedora 28 Update: kernel-headers-4.20.5-100.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

[SECURITY] Fedora 28 Update: kernel-headers-4.19.14-200.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

EulerOS 2.0 SP5 : openssl (EulerOS-SA-2019-1009)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - openssl: ROHNP - Key Extraction Side Channel in Multiple Crypto Libraries CVE-2018-0495 - openssl: Malicious server can send large prime to...