redhat enterprise linux eus 6.7 vulnerabilities and exploits

(subscribe to this query)

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive...

A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.

Redhat Enterprise Linux Server Eus 6.7 Redhat Enterprise Linux Server Tus 6.6 Redhat Enterprise Linux Server Aus 6.6 Redhat Enterprise Linux Server Tus 6.5 Redhat Enterprise Linux Server Aus 6.2 Redhat Enterprise Linux Server Aus 6.4 Redhat Enterprise Linux Server Aus 6.5

While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenS...

1 Github repository

Heap-based buffer overflow in SPICE prior to 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.

Redhat Enterprise Linux Server Eus 6.7.z Redhat Enterprise Linux Hpc Node 6.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Debian Debian Linux 8.0 Debian Debian Linux 7.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.04 Spice Project Spice Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Hpc Node 7.0 Redhat Enterprise Linux Server Eus 7.1 Redhat Enterprise Linux Hpc Node Eus 7.1

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel prior to 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.

In Apache httpd prior to 2.2.34 and 2.4.x prior to 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '...

1 Github repository

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

Vmware Esxi 6.0 Vmware Esxi 6.5 Vmware Esxi 6.7 Vmware Horizon Daas Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Eus 7.7 Redhat Enterprise Linux Server Aus 7.7 Redhat Enterprise Linux Server Tus 7.7 Openslp Openslp 1.2.1 Openslp Openslp 2.0.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31

2 Github repositories

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

1 Github repository

Race condition in mm/gup.c in the Linux kernel 2.x up to and including 4.x prior to 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka ...

Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux Tus 6.5 Redhat Enterprise Linux Eus 6.7 Redhat Enterprise Linux Long Life 5.6 Redhat Enterprise Linux Aus 6.4 Redhat Enterprise Linux 5 Redhat Enterprise Linux Long Life 5.9 Redhat Enterprise Linux Aus 6.2 Redhat Enterprise Linux Eus 7.1 Redhat Enterprise Linux Eus 6.6 Redhat Enterprise Linux Aus 6.5 Debian Debian Linux 8.0 Debian Debian Linux 7.0

5 EDB exploits177 Github repositories6 Articles

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an malicious user to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of th...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook