🟡 Medium ⏱ 10–30 min Last verified: 29 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-4326 Upstream summary: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended […]
🟠 High ⏱ 30–90 min Last verified: 29 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2008-0588, IBM Support Bulletin CVE: CVE-2008-0588 NVD summary: Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. References: […]
🟡 Medium ⏱ 15–45 min Last verified: 26 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-1918, IBM PSIRT advisory page CVE: CVE-2007-1918 NVD summary: The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-1946 Upstream summary: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid […]
🟡 Medium ⏱ 10–30 min Last verified: 24 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-6318 Upstream summary: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) […]
🟡 Medium ⏱ 15–45 min Last verified: 22 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0116, IBM PSIRT advisory page CVE: CVE-1999-0116 NVD summary: Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, […]
🟡 Medium ⏱ 15–45 min Last verified: 22 March 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2015-4948, IBM Support Bulletin CVE: CVE-2015-4948 NVD summary: netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to […]
🟡 Medium ⏱ 10–30 min Last verified: 22 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1364-1 (see also SUSE bugzilla) Related CVEs: CVE-2007-6746 Upstream summary: telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain […]
🟡 Medium ⏱ 10–30 min Last verified: 21 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2015:1892-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Upstream summary: libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, […]
🟠 High ⏱ 30–90 min Last verified: 21 March 2016 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-9795, IBM PSIRT advisory page CVE: CVE-2016-9795 NVD summary: The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA […]
