5753 matches found
Virtuozzo 6 : nss-util / nss-util-devel (VZLSA-2017-1100)
An update for nss and nss-util is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
postgis: Heap-buffer-overflow in ptarray_from_wkb_state
Project: https://git.osgeo.org/gitea/postgis/postgis.git Detailed report: https://oss-fuzz.com/testcase?key=6439724333924352 Project: postgis Fuzzer: libFuzzerpostgiswkbimportfuzzer Fuzz target binary: wkbimportfuzzer Job Type: libfuzzerasanpostgis Platform Id: linux Crash Type:...
Virtuozzo Linux Errata and Bugfix Advisory 2017:1728
Upstream security update. Follow RHBA-2017-1728 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2017:1726
Upstream security update. Follow RHBA-2017-1726 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2017:1725
Upstream security update. Follow RHBA-2017-1725 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2017:1727
Upstream security update. Follow RHBA-2017-1727 for details...
[ASA-201707-9] lib32-flashplugin: multiple issues
Arch Linux Security Advisory ASA-201707-9 ========================================= Severity: Critical Date : 2017-07-11 CVE-ID : CVE-2017-3080 CVE-2017-3099 CVE-2017-3100 Package : lib32-flashplugin Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-343 Summary =======...
CVE-2017-0710
A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...
CVE-2017-0710
A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...
Privilege escalation
A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...
CVE-2017-0710
CVE-2017-0710 is an elevation-of-privilege vulnerability in the Android kernel (Upstream Linux tcb/KernelTCB). The CNVD entry describes a privilege-lifting issue in KernelTCB in Android where an attacker could bypass privilege validation and access arbitrary ptrace, enabling local privilege escal...
Fedora 24 : openvpn (2017-5596f2f94d)
Updates to the latest upstream OpenVPN 2.3.17, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...
CVE-2017-10791
There is an Integer overflow in the hashint function of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...
CVE-2017-10699
avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy with a wrong size, leading to a denial of service application crash or possibly code execution...
Virtuozzo Linux Errata and Security Advisory 2017:1581 Important
Upstream security update. Follow RHSA-2017-1581 for details...
Virtuozzo Linux Errata and Bugfix Advisory 2017:1603
Upstream security update. Follow RHBA-2017-1603 for details...
cmark: Index-out-of-bounds in S_render_node
Project: https://github.com/jgm/cmark.git https://github.com/commonmark/cmark.git Detailed report: https://oss-fuzz.com/testcase?key=5546760854306816 Project: cmark Fuzzer: libFuzzercmarkfuzzer Fuzz target binary: cmarkfuzzer Job Type: libfuzzerubsancmark Platform Id: linux Crash Type:...
Virtuozzo Linux Errata and Security Advisory 2017:1576 Important
Upstream security update. Follow RHSA-2017-1576 for details...
[SECURITY] [DLA 1003-1] unrar-nonfree security update
Package : unrar-nonfree Version : 1:4.1.4-1+deb7u2 CVE ID : CVE-2012-6706 Debian Bug : 865461 It was reported that unrar fixed a VMSFDELTA memory corruption issue in their latest version unrarsrc-5.5.5.tar.gz. This problem was reported to Sophos AV in 2012 but never reach upstream rar. For Debian...