Ubuntu 14.04 LTS : ca-certificates update (USN-2913-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2913-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20160104 package,...

Ubuntu 14.04 LTS : libssh vulnerabilities (USN-2912-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2912-1 advisory. Mariusz Ziulek discovered that libssh incorrectly handled certain packets. A remote attacker could possibly use this issue to cause libssh to crash,...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2909-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2909-1 advisory. halfdog discovered that OverlayFS, when mounting on top of a FUSE mount, incorrectly propagated file attributes, including setuid. A local unprivileged...

Tenable Nessus < 6.5.5 Host Details Scan Results XSS

According to its version, the Tenable Nessus application running on the remote host is prior to 6.5.5. It is, therefore, affected by a cross-site scripting XSS vulnerability in the Host Details section due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can...

SUSE SLED12 / SLES12 Security Update : dhcp (SUSE-SU-2016:0541-1)

This update for dhcp fixes the following issues : - CVE-2015-8605: A remote attacker could have used badly formed packets with an invalid IPv4 UDP length field to cause a DHCP server, client, or relay program to terminate abnormally bsc961305 The following bugs were fixed : - bsc936923: Improper...

Debian DLA-423-1 : krb5 security update

CVE-2015-8629 It was discovered that an authenticated attacker can cause kadmind to read beyond the end of allocated memory by sending a string without a terminating zero byte. Information leakage may be possible for an attacker with permission to modify the database. CVE-2015-8631 It was...

F5 Networks BIG-IP : OpenSSL vulnerability (SOL33209124) (deprecated)

ssl/s2srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the getclientmasterkey and...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-0258)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2016-0258 advisory. 38.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 38.6.0-1 - Update to 38.6.0 Tenable has...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3519)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3519 advisory. - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection Andy Lutomirski Orabug: 22742507 CVE-2015-5157 - x86/nmi/64: Reorder nested NMI...

Debian DLA-419-1 : gtk+2.0 security update

Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 'Squeeze', this issue has been fixed in gtk+2.0 version 2.20.1-2+deb6u1. We recommend you to upgrade your gtk+2.0...

Ubuntu 14.04 LTS : NSS vulnerability (USN-2903-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2903-1 advisory. Hanno Bck discovered that NSS incorrectly handled certain division functions, possibly leading to cryptographic weaknesses. CVE-2016-1938 This update also refresh...

Ubuntu 14.04 LTS : xdelta3 vulnerability (USN-2901-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2901-1 advisory. It was discovered that xdelta3 incorrectly handled certain files. If a user or automated system were tricked into processing a specially-crafted file, a remote...

Oracle Linux 7 : sos (ELSA-2016-0188)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-0188 advisory. 3.2-35.0.1.3 - Recreated patch for orabug 18913115 - Make the selinux plugin fixfiles option useful John Haxby orabug 18913115 - Added removegpgstring.patch Bug...

Tenable SecurityCenter OpenSSL ASN.1 Signature Verification Routine DoS (TNS-2016-01)

The SecurityCenter application installed on the remote host is affected by a denial of service vulnerability in the bundled OpenSSL library. The library is version 1.0.1 or later but prior to 1.0.1q. It is, therefore, affected by a NULL pointer dereference flaw in file rsaameth.c due to improper...

Oracle Linux 7 : kernel (ELSA-2016-0185)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0185 advisory. - security keys: Fix keyring ref leak in joinsessionkeyring David Howells 1298931 1298036 CVE-2016-0728 - security keys: Don't permit requestkey to...

SUSE SLED12 / SLES12 Security Update : libnettle (SUSE-SU-2016:0455-1)

This update for libnettle fixes the following security issues : - CVE-2015-8803: Fixed miscomputation bugs in secp-256r1 modulo functions. bsc964845 - CVE-2015-8804: Fixed carry folding bug in x8664 ecc384modp. bsc964847 - CVE-2015-8805: Fixed miscomputation bugs in secp-256r1 modulo functions...

Ubuntu 14.04 LTS : GNU C Library vulnerability (USN-2900-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2900-1 advisory. It was discovered that the GNU C Library incorrectly handled receiving responses while performing DNS resolution. A remote attacker could use this issue to cause...

Oracle Linux 7 : 389-ds-base (ELSA-2016-0204)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0204 advisory. - Resolves: bug 1299757 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS Tenable has extracted the preceding...

Tenable Nessus Multiple Vulnerabilities (TNS-2016-02)

Tenable Nessus is prone to multiple vulnerabilities. Copyright C 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Debian DLA-415-1 : cpio security update

An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 'Squeeze', this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about the Debian Long Term Support LTS Project and how to apply these updates at:...