🟡 Medium ⏱ 10–30 min Last verified: 21 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SA:2011:035 (see also SUSE bugzilla) Related CVEs: CVE-2011-2483 Upstream summary: crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle […]
🟡 Medium ⏱ 10–30 min Last verified: 17 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2676-1 Related CVEs: CVE-2013-6410 CVE-2013-7441 CVE-2015-0847 Upstream summary: It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that […]
🟠 High ⏱ 15–60 min Last verified: 17 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3230 Upstream summary: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server […]
🟡 Medium ⏱ 10–30 min Last verified: 14 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2405-1 Related CVEs: CVE-2014-3641 CVE-2014-7230 CVE-2013-1068 Upstream summary: Duncan Thomas discovered that OpenStack Cinder did not properly track the file format when using the GlusterFS of Smbfs drivers. A remote […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2014-3775 Upstream summary: libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause […]
🟠 High ⏱ 15–60 min Last verified: 13 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2020:3149-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5262 CVE-2014-3577 CVE-2012-5783 Upstream summary: http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 10 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2012:0096-1 (see also SUSE bugzilla) Related CVEs: CVE-2011-4182 Upstream summary: Missing escaping of ESSID values in sysconfig of SUSE Linux Enterprise allows attackers controlling an access point to cause execute arbitrary code. […]
🟡 Medium ⏱ 10–30 min Last verified: 7 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2011:005 (see also SUSE bugzilla) Related CVEs: CVE-2011-1018 Upstream summary: logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via […]
🟠 High ⏱ 30–90 min Last verified: 7 April 2015 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-8904, IBM Support Bulletin CVE: CVE-2014-8904 NVD summary: lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2015 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0774-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-0210 CVE-2014-0211 CVE-2011-2895 CVE-2013-6462 CVE-2014-0209 CVE-2015-1802 CVE-2015-1803 CVE-2015-1804 +2 more Upstream summary: Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow […]
