🟢 Low ⏱ 5–15 min Last verified: 22 May 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3069-1 Related CVEs: CVE-2016-6855 Upstream summary: It was discovered that Eye of GNOME incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a […]
🟡 Medium ⏱ 10–30 min Last verified: 22 May 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:3250-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961 Upstream summary: Stack-based buffer overflow in game-music-emu before 0.6.1. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟠 High ⏱ 30–90 min Last verified: 22 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2010-1124, IBM Support Bulletin CVE: CVE-2010-1124 NVD summary: bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent […]
🟠 High ⏱ 30–90 min Last verified: 20 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-6717, IBM Support Bulletin CVE: CVE-2007-6717 NVD summary: Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors. References: secunia.com/advisories/27437 […]
🟡 Medium ⏱ 15–45 min Last verified: 19 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-0670, IBM Support Bulletin CVE: CVE-2007-0670 NVD summary: Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including (1) rdist, […]
🟡 Medium ⏱ 15–45 min Last verified: 17 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-1913, IBM PSIRT advisory page CVE: CVE-2007-1913 NVD summary: The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to verify the existence of users and […]
🟠 High ⏱ 30–90 min Last verified: 17 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-1798, IBM Support Bulletin CVE: CVE-2007-1798 NVD summary: Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 16 May 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:2189-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-5746 Upstream summary: libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users […]
🟢 Low ⏱ 10–30 min Last verified: 15 May 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-1480, IBM PSIRT advisory page CVE: CVE-1999-1480 NVD summary: (1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack. References: www.securityfocus.com/bid/429 […]
🟡 Medium ⏱ 10–30 min Last verified: 15 May 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3193-1 Related CVEs: CVE-2016-6489 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 Upstream summary: It was discovered that Nettle incorrectly mitigated certain timing side-channel attacks. A remote attacker could possibly use this flaw to recover […]
