ibm

Security Bulletin: Multiple vulnerabilities in NTP, OpenSSL and GNU glibc affect IBM Netezza Host Management

Summary NTP, OpenSSL, GNU glibc and Libreswan are used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2015-1799 DESCRIPTION: Network Time Protocol (NTP) Project NTP daemon (ntpd) is vulnerable to a denial of service,...

7.8 CVSS

2019-10-18T03:10:29

ibm

Security Bulletin: Multiple vulnerabilities in the GNU C Library (glibc) affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in GNU glibc. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library (glibc) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the nss_dns backend for the...

7.5 CVSS

2018-06-18T01:30:38

ibm

Security Bulletin: Vulnerabilities in Glibc affect IBM Security Network Controller (CVE-2015-5229, CVE-2015-8776)

Summary Glibc vulnerabilities were found in IBM Security Network Controller. IBM Security Network Controller has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-5229 DESCRIPTION: GNU C Library (glibc) is vulnerable to a denial of service, caused by the return of memory areas...

6.4 CVSS

2018-06-16T21:45:31

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Active Bypass (CVE-2015-5229, CVE-2015-8776)

Summary OpenSSL vulnerabilities were found in IBM Security Network Active Bypass. IBM Security Network Active Bypass has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-5229 DESCRIPTION: GNU C Library (glibc) is vulnerable to a denial of service, caused by the return of memory...

6.4 CVSS

2018-06-16T21:45:04

ibm

Security Bulletin: IBM Security Guardium is affected by OpenSource GNU glibc Vulnerability (CVE-2015-8776 CVE-2015-5229)

Summary GNU C Library (glibc) is vulnerable to a denial of service. IBM Security Guardium has provided a fix for this issue Vulnerability Details CVEID: CVE-2015-8776 DESCRIPTION: GNU C Library (glibc) is vulnerable to a denial of service. By passing out-of-range time values to the strftime...

6.4 CVSS

2018-06-16T21:44:21

impervablog

Deserialization Attacks Surge Motivated by Illegal Crypto-mining

Imperva’s research group is constantly monitoring new web application vulnerabilities. In doing so, we’ve noticed at least four major insecure deserialization vulnerabilities that were published in the past year. Our analysis shows that, in the past three months, the number of deserialization...

10.0 CVSS

2018-01-24T17:45:08

oraclelinux

glibc security, bug fix, and enhancement update

[2.17-157] - Rebuild with updated binutils (#1268008) [2.17-156] - malloc arena free free list management fix (#1276753) [2.17-155] - Basic validity check for locale-archive.tmpl (#1350733) [2.17-153] - Add Intel AVX-512 optimized routines (#1298526). [2.17-151] - Improve malloc peformance in...

6.8 CVSS

2016-11-09T00:00:00

oraclelinux

glibc security update

[2.17-157] - Rebuild with updated binutils (#1268008) [2.17-156] - malloc arena free free list management fix (#1276753) [2.17-155] - Basic validity check for locale-archive.tmpl (#1350733) [2.17-153] - Add Intel AVX-512 optimized routines (#1298526). [2.17-151] - Improve malloc peformance in...

6.8 CVSS

2016-11-09T00:00:00

openvas

RedHat Update for glibc RHSA-2016:2573-02

The remote host is missing an update for the ############################################################################### OpenVAS Vulnerability Test RedHat Update for glibc RHSA-2016:2573-02 Authors: System Generated Check Copyright: Copyright (C) 2016 Greenbone Networks GmbH,...

7.2 CVSS

2016-11-04T00:00:00

nessus

Atlassian Bamboo Server 5.12.x < 5.12.3.1 RCE

Versions of Bamboo 5.12.x prior to 5.12.3.1 contain a Java object deserialization flaw that is triggered when handling certain input from build agents. This may allow a remote attacker to potentially execute arbitrary code. Binary data...

7.5 CVSS

2016-10-14T00:00:00

nessus

Atlassian Bamboo Server < 5.11.4.1 RCE

Versions of Bamboo prior to 5.11.4.1 contain a Java object deserialization flaw that is triggered when handling certain input from build agents. This may allow a remote attacker to potentially execute arbitrary code. Binary data...

7.5 CVSS

2016-10-14T00:00:00

cve

CVE-2016-5229

Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream...

7.5 CVSS

2016-08-02T16:59:00

openvas

Atlassian Bamboo Remote Code Execution Vulnerability

Atlassian Bamboo is prone to remote code-execution vulnerability. ############################################################################### OpenVAS Vulnerability Test Atlassian Bamboo Remote Code Execution Vulnerability Authors: Michael Meyer michael.meyer@greenbone.net Copyright:...

7.5 CVSS

2016-07-27T00:00:00

atlassian

CVE-2016-5229 - Deserialisation resulting in remote code execution caused by insufficient restriction on permitted deserialised classes

Bamboo had a resource that deserialised input from build agents and did not sufficiently restrict which classes could be deserialised. To exploit this issue, attackers need to have a valid Bamboo agent fingerprint or be able to run code on a Bamboo agent. Affected versions: * All versions of...

7.5 CVSS

2016-07-07T04:22:24

atlassian

CVE-2016-5229 - Deserialisation resulting in remote code execution caused by insufficient restriction on permitted deserialised classes

Bamboo had a resource that deserialised input from build agents and did not sufficiently restrict which classes could be deserialised. To exploit this issue, attackers need to have a valid Bamboo agent fingerprint or be able to run code on a Bamboo agent. Affected versions: * All versions of...

7.5 CVSS

2016-07-07T04:22:24

openvas

Amazon Linux: Security Advisory (ALAS-2016-660)

The remote host is missing an update announced via the referenced Security Advisory. # Copyright (C) 2016 Eero Volotinen Text descriptions are largely excerpted from the referenced advisory, and are Copyright (C) of their respective author(s) SPDX-License-Identifier: GPL-2.0-or-later This...

5.0 CVSS

2016-03-11T00:00:00

nessus

Amazon Linux AMI : glibc (ALAS-2016-660)

It was discovered that the calloc implementation in glibc could return memory areas which contain non-zero bytes. This could result in unexpected application behavior such as hangs or crashes. # (C) Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

5 CVSS

2016-03-11T00:00:00

openvas

Oracle Linux Local Check: ELSA-2016-0176

Oracle Linux Local Security Checks ELSA-2016-0176 ############################################################################### OpenVAS Vulnerability Test $Id: ELSA-2016-0176.nasl 14180 2019-03-14 12:29:16Z cfischer $ Oracle Linux Local Check Authors: Eero Volotinen eero.volotinen@solinor.com ...

6.8 CVSS

2016-02-18T00:00:00

openvas

Oracle Linux Local Check: ELSA-2016-3515

Oracle Linux Local Security Checks ELSA-2016-3515 ############################################################################### OpenVAS Vulnerability Test $Id: ELSA-2016-3515.nasl 14180 2019-03-14 12:29:16Z cfischer $ Oracle Linux Local Check Authors: Eero Volotinen eero.volotinen@solinor.com ...

6.8 CVSS

2016-02-18T00:00:00

centos

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2016:0176 The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the...

6.8 CVSS

2016-02-17T01:37:20