Branch t7 update bulletin.

Package kernel-image-led-ws updated to version 3.4.68-alt1.M70P.1 for branch t7 in task 108610.

Published: 2013-10-24

BDU:2014-00091

Уязвимость операционной системы Linux, позволяющая злоумышленнику получить доступ к конфиденциальной информации из памяти ядра

Severity: MEDIUM (6.0)

References:

CVE-2013-4299

Published: 2013-01-22

BDU:2015-04307

Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04308

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04309

Severity: CRITICAL (10.0)

References:

Published: 1970-01-01

BDU:2015-04310

Severity: CRITICAL (10.0)

References:

Published: 2013-10-24
Modified: 2024-11-21

CVE-2013-4299

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.

Severity: MEDIUM (6.0)

References:

Published: 2013-09-25
Modified: 2024-11-21

CVE-2013-4350

The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.

Severity: MEDIUM (5.0)

References:

Package lighttpd updated to version 1.4.33-alt1 for branch t7 in task 108610.

Published: 2012-11-25
Modified: 2024-11-21

CVE-2012-5533

The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header.

Severity: MEDIUM (5.0)

References:

Published: 2013-11-20
Modified: 2024-11-21

CVE-2013-4559

lighttpd before 1.4.33 does not check the return value of the (1) setuid, (2) setgid, or (3) setgroups functions, which might cause lighttpd to run as root if it is restarted and allows remote attackers to gain privileges, as demonstrated by multiple calls to the clone function that cause setuid to fail when the user process limit is reached.

Severity: HIGH (7.6)

References:

Published: 2013-11-20
Modified: 2024-11-21

CVE-2013-4560

Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service (segmentation fault and crash) via unspecified vectors that trigger FAMMonitorDirectory failures.

Severity: MEDIUM (5.0)

References:

Package samba updated to version 4.0.11-alt0.M70P.1 for branch t7 in task 108610.

Published: 2013-08-06

BDU:2015-05647

Уязвимость функции read_nttrans_ea_list программного обеспечения для обращения к сетевым дискам Samba, связанная с целочисленным переполнением через созданные записи в таблице документа, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (5.3) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References:

CVE-2013-4124

Published: 2013-08-06

BDU:2015-05648

Уязвимость операционной системы openSUSE, позволяющая злоумышленнику нарушить доступность защищаемой информации

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05649

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05650

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05651

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05652

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05653

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05654

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05655

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05656

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05657

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05658

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05659

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05660

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05661

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05662

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05663

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05664

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05665

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05666

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05667

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 2013-08-05

BDU:2015-05668

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05669

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05670

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05671

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05672

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05673

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05674

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05675

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05676

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05677

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05678

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 1970-01-01

BDU:2015-05679

Severity: MEDIUM (5.0)

References:

CVE-2013-4124

Published: 2014-03-17

BDU:2015-06051

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.9)

References:

Published: 2010-02-26

BDU:2015-06052

References:

Published: 2014-03-17

BDU:2015-06324

Уязвимости операционной системы Red Hat Enterprise Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-06326

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-06507

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-06512

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-06517

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-06525

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-08944

Уязвимости операционной системы CentOS, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: HIGH (7.9)

References:

Published: 2014-03-17

BDU:2015-08945

Уязвимости операционной системы CentOS, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-08946

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-08947

Severity: CRITICAL (10.0)

References:

Published: 2014-03-17

BDU:2015-08948

Severity: CRITICAL (10.0)

References:

Published: 2013-11-13

BDU:2021-01278

Уязвимость функции vfs_streams_depot or vfs_streams_xattr пакета программ сетевого взаимодействия Samba, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность

Severity: MEDIUM (5.4) Vector: AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

References:

CVE-2013-4475

Published: 2013-11-13

BDU:2021-01301

Уязвимость пакета программ сетевого взаимодействия Samba, связанная с недостатками в механизме криптографической защиты, позволяющая нарушителю получить доступ к конфиденциальным данным

Severity: LOW (3.2) Vector: AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

References:

CVE-2013-4476

Published: 2013-08-06
Modified: 2024-11-21

CVE-2013-4124

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.

Severity: MEDIUM (5.0)

References:

Published: 2013-11-13
Modified: 2024-11-21

CVE-2013-4475

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Severity: MEDIUM (4.0)

References:

Published: 2013-11-13
Modified: 2024-11-21

CVE-2013-4476

Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controller.

Severity: LOW (1.2)

References:

CVE-2013-4124, CVE-2013-4475, CVE-2013-4476

Version: 2.1.0

ALT-BU-2013-1362-1

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed bugs