openSUSE Security Update : dracut (openSUSE-2017-482)

This update for dracut fixes the following issues : Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc10083...

CVE-2017-7609

elfcompress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service memory consumption via a crafted ELF file...

Automated Modular Cryptanalysis Tool: FeatherDuster

Automated Modular Cryptanalysis Tool FeatherDuster is a tool written by Daniel “unicornfurnace” Crowley of NCC Group for breaking crypto which tries to make the process of identifying and exploiting weak cryptosystems as easy as possible. Cryptanalib is the moving parts behind FeatherDuster, and...

DEBIAN-CVE-2017-7609

elfcompress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service memory consumption via a crafted ELF file...

CVE-2017-7609

elfcompress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service memory consumption via a crafted ELF file...

CVE-2017-7609

Technical details about CVE-2017-7609 are not publicly provided in the connected documents. Please monitor for updates from the source or vendor advisories to obtain affected products, impact, and remediation information.

CVE-2017-7609: Improper Input Validation

elfcompress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service memory consumption via a crafted ELF file...

CVE-2017-7609

elfcompress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service memory consumption via a crafted ELF file...

UBUNTU-CVE-2017-7609

elfcompress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service memory consumption via a crafted ELF file...

PT-2017-17840 · Red Hat +3 · Elfutils +3

Name of the Vulnerable Software and Affected Versions: elfutils version 0.168 Description: The issue is related to the elf compress.c file in elfutils, which does not validate the zlib compression factor. This allows remote attackers to cause a denial of service, specifically memory consumption, ...

SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2017:0951-1)

This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...

Github enterprise remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

Right now, almost everyone in the use of GitHub. If you have a lot of Green Paper or for your own code very paranoid, then you can run your own GitHub. Paid$ 2500 dollars, you can get a GitHub Enterprise version for 10 users for one year. In fact, Github enterprise is a virtual machine, but...

Debian Security Advisory DSA 3801-1 (ruby-zip - security update)

It was discovered that ruby-zip, a Ruby module for reading and writing zip files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. dot dot in an extracted filename. OpenVAS Vulnerability Te...

Security update for Chromium (important)

This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink -...

zlib: Multiple vulnerabilities

Background zlib is a widely used free and patent unencumbered data compression library. Description Multiple vulnerabilities have been discovered in zlib. Please review the CVE identifiers referenced below for details. Impact An attacker could cause a Denial of Service condition. Workaround There...

GLSA-201701-56 : zlib: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-56 zlib: Multiple vulnerabilities Multiple vulnerabilities have been discovered in zlib. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a Denial of Service condition...

openSUSE Security Update : zlib (openSUSE-2017-46)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 - Incompatible declarations for external...

openSUSE Security Update : zlib (openSUSE-2017-47)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 - Incompatible declarations f...

PT-2017-1237

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.4 Description The issue is related to a buffer overflow in the shared memory manager of the sshd daemon in OpenSSH, which can be exploited by a local attacker to gain privileges. This is achieved by leveraging acces...

SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0004-1)

This update for zlib fixes the following issues : - CVE-2016-9843: Big-endian out-of-bounds pointer bsc1013882 - CVE-2016-9842: Undefined Left Shift of Negative Number bsc1003580 CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c bsc1003579 Incompatible declarations for...