4544 matches found
Xdg-Utils: Command injection
Background Xdg-Utils is a set of tools allowing all applications to easily integrate with the Free Desktop configuration. Description An eval injection vulnerability was discovered in Xdg-Utils. Impact A context-dependent attacker could execute arbitrary code via the URL argument to xdg-open...
exFAT: Multiple vulnerabilities
Background A full-featured exFAT file system implementation for Unix-like systems. Description Two vulnerabilities were found in exFAT. A malformed input can cause a write heap overflow or cause an endless loop. Impact Remote attackers could execute arbitrary code or cause Denial of Service...
GLSA-201612-08 : LinuxCIFS utils: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-201612-08 LinuxCIFS utils: Buffer overflow A stack-based buffer overflow was discovered in cifskey.c or cifscreds.c in LinuxCIFS, as used in pamcifscreds. Impact : A remote attacker could exploit this vulnerability to cause an...
Fedora Update for ecryptfs-utils FEDORA-2016-70b5173c05
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libguestfs and virt-p2v security, bug fix, and enhancement update
libguestfs 1:1.32.7-3 - Rebase to libguestfs 1.32 in RHEL 7.3 resolves: rhbz1218766 - The full tests are now run after the package has been built. - New tool and subpackage: virt-dib safe diskimage-builder replacement. - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg s...
RedHat Update for powerpc-utils-python RHSA-2016:2607-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
powerpc-utils-python: arbitrary code execution due to unpickling untrusted input
It was found that the amsvis command of the powerpc-utils-python package did not verify unpickled data before processing it. This could allow an attacker who can connect to an amsvis server process or cause an amsvis client process to connect to them to execute arbitrary code as the user running...
Moderate: Red Hat Security Advisory: powerpc-utils-python security update
An update for powerpc-utils-python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
OracleVM 3.2 : bind (OVMSA-2016-0153)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-8864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0153. include'deprecatednasllevel.inc...
OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0152)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-8864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0152. include'deprecatednasllevel.inc...
Fedora 23 : ecryptfs-utils (2016-70b5173c05)
ecryptfs-utils updated to 111 - fix ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive CVE-2016-6224, rhbz1356828 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0145)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2848 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0145. include'deprecatednasllevel.inc...
OracleVM 3.2 : bind (OVMSA-2016-0146)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2848 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0146. include'deprecatednasllevel.inc...
OracleVM 3.2 : bind (OVMSA-2016-0137)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2776 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0137. include'deprecatednasllevel.inc...
Security update for the Linux Kernel (important)
The openSUSE 13.2 kernel was updated to fix various bugs and security issues. The following security bugs were fixed: - CVE-2016-1583: Prevent the usage of mmap when the lower file system does not allow it. This could have lead to local privilege escalation when ecryptfs-utils was installed and...
[SECURITY] Fedora 24 Update: mingw-xz-5.2.2-3.fc24
XZ Utils are an attempt to make LZMA compression easy to use on free as in freedom operating systems. This is achieved by providing tools and librari es which are similar to use than the equivalents of the most popular existing compression algorithms. LZMA is a general purpose compression algorit...
CVE-2014-9874
Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 2013 devices allows attackers to gain privileges via a crafted application, related to arch/arm/mach-msm/qdsp6v2/audioutils.c and sound/soc/msm/qdsp6v2/q6asm.c, aka Android internal bug 28751152 and...
DEBIAN-CVE-2016-5264
Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via an SVG element that is mishandled duri...
[SECURITY] Fedora 24 Update: perl-5.22.2-362.fc24
Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...
CVE-2016-1238
1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum, 6 cpan/Encode/bin/enc2xs, 7 cpan/Encode/bin/encguess, 8 cpan/Encode/bin/piconv, 9 cpan/Encode/bin/ucmlint, 10 cpan/Encode/bin/unidump, 11...