🟡 Medium ⏱ 10–30 min Last verified: 13 May 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2010:019 (see also SUSE bugzilla) Related CVEs: CVE-2010-2522 CVE-2010-2523 Upstream summary: The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to […]
🟡 Medium ⏱ 15–45 min Last verified: 12 May 2015 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2015-3318, IBM PSIRT advisory page CVE: CVE-2015-3318 NVD summary: CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; […]
🟢 Low ⏱ 5–15 min Last verified: 9 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2307-1 Related CVEs: CVE-2014-3564 Upstream summary: Tomáš Trnka discovered that GPGME incorrectly handled certain certificate line lengths. An attacker could use this issue to cause applications using GPGME to crash, […]
🟡 Medium ⏱ 10–30 min Last verified: 8 May 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0467-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-6401 Upstream summary: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 4 May 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1099-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1982 Upstream summary: Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow […]
🟢 Low ⏱ 5–15 min Last verified: 3 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4777-1 Related CVEs: CVE-2015-8860 Upstream summary: It was discovered that node-tar mishandled certain tar archives. An attacker could use this vulnerability to write arbitrary files to the filesystem. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 1 May 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2695-1 Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2743-3 Related CVEs: https://launchpad.net/bugs/1498681 https://launchpad.net/bugs/1069793 Upstream summary: USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through […]
🔴 Critical ⏱ 15–90 min Last verified: 27 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2012:0598-1 (see also SUSE bugzilla) Related CVEs: CVE-2012-1823 CVE-2012-2688 CVE-2010-2225 CVE-2010-2950 CVE-2012-0830 CVE-2013-6420 CVE-2006-7243 CVE-2010-3436 +12 more Upstream summary: sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a […]
