Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

enterprise linux hpc node vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2016-4809
The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive prior to 3.2.1 allows remote malicious users to cause a denial of service (application crash) via a CPIO archive with a large symlink.
Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Hpc Node Eus 7.2Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server Aus 7.2Oracle Linux 6Oracle Linux 7Libarchive Libarchive
7.2
CVSSv2
CVE-2016-0758
Integer overflow in lib/asn1_decoder.c in the Linux kernel prior to 4.6 allows local users to gain privileges via crafted ASN.1 data.
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Hpc Node Eus 7.2Linux Linux KernelCanonical Ubuntu Linux 16.04
5.1
CVSSv2
CVE-2016-5388
Apache Tomcat 7.x up to and including 7.0.70 and 8.x up to and including 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which mi...
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Hpc Node Eus 7.2Hp System Management HomepageRedhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Oracle Linux 6Oracle Linux 7Apache Tomcat
7.2
CVSSv2
CVE-2015-5260
Heap-based buffer overflow in SPICE prior to 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.
Redhat Enterprise Linux Server Eus 6.7.zRedhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Debian Debian Linux 8.0Debian Debian Linux 7.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Spice Project SpiceRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Hpc Node Eus 7.1
6.9
CVSSv2
CVE-2015-3247
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors.
Spice Project Spice 0.12.4Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Hpc Node 6
6.8
CVSSv2
CVE-2016-3698
libndp prior to 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote malicious users to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertis...
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Hpc Node Eus 7.2Libndp LibndpDebian Debian Linux 8.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 15.10
6.8
CVSSv2
CVE-2014-9673
Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType prior to 2.5.4 allows remote malicious users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.
Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 15.04Debian Debian Linux 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server Eus 6.6.zRedhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Hpc Node Eus 7.1Opensuse Opensuse 13.2Opensuse Opensuse 13.1Freetype Freetype
7.5
CVSSv2
CVE-2014-9661
type42/t42parse.c in FreeType prior to 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote malicious users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 10.04Debian Debian Linux 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Hpc Node 6Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Hpc Node Eus 7.1Redhat Enterprise Linux Server Eus 6.6.zRedhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Freetype FreetypeOpensuse Opensuse 13.2Opensuse Opensuse 13.1Fedoraproject Fedora 21Fedoraproject Fedora 20
6.8
CVSSv2
CVE-2014-9667
sfnt/ttload.c in FreeType prior to 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote malicious users to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFN...
Debian Debian Linux 7.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Fedoraproject Fedora 21Fedoraproject Fedora 20Freetype FreetypeOpensuse Opensuse 13.2Opensuse Opensuse 13.1Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Hpc Node Eus 7.1Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Hpc Node 6Redhat Enterprise Linux Server Eus 6.6.zRedhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0
4.3
CVSSv2
CVE-2014-9671
Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType prior to 2.5.4 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incre...
Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Hpc Node Eus 7.1Redhat Enterprise Linux Server Eus 6.6.zRedhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 6Redhat Enterprise Linux Desktop 6.0Debian Debian Linux 7.0Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 10.04Oracle Solaris 10.0Oracle Solaris 11.2Opensuse Opensuse 13.2Opensuse Opensuse 13.1Freetype Freetype
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook