🟢 Low ⏱ 10–30 min Last verified: 15 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-1480, IBM PSIRT advisory page CVE: CVE-1999-1480 NVD summary: (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. References: www.securityfocus.com/bid/429 […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3193-1 Related CVEs: CVE-2016-6489 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 Upstream summary: It was discovered that Nettle incorrectly mitigated certain timing side-channel attacks. A remote attacker could possibly use this flaw to recover […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2012:0703-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-2369 CVE-2015-8833 Upstream summary: Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might […]
🟢 Low ⏱ 5–15 min Last verified: 13 May 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4799-1 Related CVEs: CVE-2016-8714 Upstream summary: It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use this to cause a denial of service […]
🟠 High ⏱ 30–90 min Last verified: 12 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-1915, IBM PSIRT advisory page CVE: CVE-2007-1915 NVD summary: Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code […]
🟠 High ⏱ 30–90 min Last verified: 11 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2009-3517, IBM Support Bulletin CVE: CVE-2009-3517 NVD summary: nfs.ext in IBM AIX 5.3.x through 5.3.9 and 6.1.0 through 6.1.2 does not properly use the nfs_portmon setting, which allows remote attackers to bypass […]
🟢 Low ⏱ 10–30 min Last verified: 10 May 2016 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2016-0281, IBM Support Bulletin CVE: CVE-2016-0281 NVD summary: The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6519-2 Related CVEs: https://launchpad.net/bugs/1941785 Upstream summary: USN-6519-1 added IMDSv2 support to EC2 hibagent. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: The EC2 hibagent package […]
🟢 Low ⏱ 5–15 min Last verified: 8 May 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-6936-1 Related CVEs: CVE-2015-4852 Upstream summary: It was discovered that Apache Commons Collections allowed serialization support for unsafe classes by default. A remote attacker could possibly use this issue to […]
🟡 Medium ⏱ 15–45 min Last verified: 7 May 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2012-0723, IBM Support Bulletin CVE: CVE-2012-0723 NVD summary: The kernel in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly implement the dupmsg system call, which […]
