CVE-2011-1486

CVE-2011-1486 affects libvirt’s libvirtd: libvirt before 0.9.0 uses non‑thread-safe error reporting, allowing remote attackers to cause a denial of service (crash) by having multiple threads report errors simultaneously. This is evidenced in multiple advisories (openSUSE/libvirt patches note the ...

CVE-2011-1486: Undefined Security Weakness

libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service crash by causing multiple threads to report errors at the same time...

CVE-2011-1486

libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service crash by causing multiple threads to report errors at the same time...

libvirt security and bug fix update

0.8.1-27.0.1.el60.6 - Replace docs/et.png in tarball with blank image 0.8.1-27.el60.6 - Properly initialize supplementary groups for qemu process rhbz668692 - Make error reporting in libvirtd thread safe CVE-2011-1486...

Fedora 13 : libvirt-0.8.2-6.fc13 (2011-4870)

Fix for CVE-2011-1486, error reporting in libvirtd is not thread safe Fix specfile to create /var/lib/libvirt with proper permissions. fix a lack of API check on read-only connections this build fix one crash in the the error handling fix a lack of API check on read-only connections Note that...

Fedora 14 : libvirt-0.8.3-9.fc14 (2011-4896)

Fix for CVE-2011-1486, error reporting in libvirtd is not thread safe Fix specfil to create /var/lib/libvirt with proper permissions. fix a lack of API check on read-only connections this build fix one crash in the the error handling fix a lack of API check on read-only connections Note that...

Mandriva Update for commoncpp MDVA-2010:225 (commoncpp)

Check for the Version of commoncpp OpenVAS Vulnerability Test Mandriva Update for commoncpp MDVA-2010:225 commoncpp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MDVA-2010:225 : commoncpp

This updates fixes two major bugs: - applog subcription/unsubscription needed to get a thread safe usage of applog were buggy and not thread safe themselves. - disabling slog usage form printout level error was not respected. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

CVE-2008-6549

The passwordchecker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...

cyrus security update

CentOS Errata and Security Advisory CESA-2007:0795 An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The...

Moderate: cyrus-sasl security and bug fix update

2.1.19-14 - Related: bz250732 Fixed a conflict with an earlier test patch 2.1.19-13 - Related: bz250732 Fixed uninitialized stack variable causing segfault 2.1.19-12 - Resolves: bz250732 sasl-sample-server crashes with null realm 2.1.19-11 - Resolves: bz243910 krb5-libs are not thread-safe -...

CVE-2006-5967

Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe...

RHEL 2.1 : mysql (RHSA-2003:094)

Updated packages are available that fix both a double-free security vulnerability and a remote root exploit security vulnerability found in the MySQL server. Updated 11 Aug 2003 Updated mysqlclient9 packages are now included. These were previously missing from this erratum. MySQL is a multi-user,...

Important: Red Hat Security Advisory: : Updated MySQL packages fix vulnerabilities

Updated MySQL server packages fix both a double-free security vulnerability and a root exploit security vulnerability. Updated 1 May 2003 Added updated packages for Red Hat Linux 9, which is vulnerable to CAN-2003-0150. MySQL is a multi-user, multi-threaded SQL database server. A double-free...

Important: Red Hat Security Advisory: mysql security update

Updated packages are available that fix both a double-free security vulnerability and a remote root exploit security vulnerability found in the MySQL server. Updated 11 Aug 2003 Updated mysqlclient9 packages are now included. These were previously missing from this erratum. MySQL is a multi-user,...