Ubuntu Security Notice 3220-2 - USN-3220-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service or possibly gain administrative privileges. Various other issues were also addressed.
ddb1e90a196e1392754e4c20d15f564b759a8d935f1f3ba666d9260de9ffcec7Ubuntu Security Notice 3220-1 - Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service or possibly gain administrative privileges.
b79e8f6d63438465d73bb91a1e2c2ade76386620571d6a71948294bcc3e05c93Ubuntu Security Notice 3219-2 - USN-3219-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service or possibly gain administrative privileges. Various other issues were also addressed.
b177c99480d5bed299174af41028842bc475c66bcc97d6ec39280073ab1dc729Ubuntu Security Notice 3219-1 - Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service or possibly gain administrative privileges.
00febeb2fc219c1de2b7dc19f0a33426b418c3708f98678b9819bed8a1cace42Ubuntu Security Notice 3218-1 - Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service or possibly gain administrative privileges.
7ed5d5b426438b7d7eac0c3cb8e92d620f169b53a5760c1186afc2033dfd5350Blue Team Training Toolkit (BT3) is an attempt to introduce improvements in current computer network defense analysis training. Based on adversary replication techniques, and with reusability in mind, BT3 allows individuals and organizations to create realistic computer attack scenarios, while reducing infrastructure costs, implementation time and risk. The Blue Team Training Toolkit is written in Python, and it includes the latest versions of Encripto's Maligno and Pcapteller.
2bbd7f800fcc261c436548893908700049b6a8bad70f7c5281ea00edf0ffd07aUbuntu Security Notice 3216-1 - Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass same origin restrictions, obtain sensitive information, spoof the addressbar, spoof the print dialog, cause a denial of service via application crash or hang, or execute arbitrary code. Various other issues were also addressed.
297db2883804e3dd70602a125a0f9c6ff35f6faa710170311b5087b847755302Ubuntu Security Notice 3217-1 - It was discovered that network-manager-applet incorrectly checked permissions when connecting to certain wireless networks. A local attacker could use this issue at the login screen to access local files.
7cf3cd1c5d9544b0cb6c79c6020fb035da0a98dbb43543e7073c0bdb493f213bRed Hat Security Advisory 2017-0457-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1.0 serves as a replacement for Red Hat JBoss Web Server 3.0.3, and includes enhancements. Multiple security issues have been addressed.
7b6d937a7363eb3534a17e5753987b42852580f1bf77ab54d81316639581af8aRed Hat Security Advisory 2017-0454-01 - KVM is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc. Security Fix: Quick emulator built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
f30bd5bd000ac01077e2ad6b6112bbe7ab8062afdc10bfa1a809edf238358052Red Hat Security Advisory 2017-0456-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1.0 serves as a replacement for Red Hat JBoss Web Server 3.0.3, and includes enhancements. Multiple security issues have been addressed.
439006faa54fcb1a99274f4917c65ee29688301c270ba766630fe134a170fcffRed Hat Security Advisory 2017-0455-01 - Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector, JBoss HTTP Connector, Hibernate, and the Tomcat Native library. This release of Red Hat JBoss Web Server 3.1.0 serves as a replacement for Red Hat JBoss Web Server 3.0.3, and includes enhancements. Multiple security issues have been addressed.
229900bcc01d582272cfb12959e445a23c0cd6ee8d637f7acf5f7769ec2c427dHuawei HG658 V2 suffers from a cross site scripting vulnerability.
19a19c0935b736aec0f1f1fc52254da55f11c3423d110f9ef065e5e3a06a1f48Agora-Project version 3.2.2 suffers from a cross site scripting vulnerability.
a2252fb99ebcf67cddcac5a545419ae7cc14ae33b48d9d6e2edcb8d5c507052fJob Portal Script version 3.0 suffers from cross site scripting and remote SQL injection vulnerabilities.
af49a79e5953a791a7a3d8c32cc8ebd753d8d5ec652131e6bccbbd0d1434d3dc
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed