Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
87

Debian: DSA-3175-2 Critical: kfreebsd-9 Router Attack Mitigation

It was discovered that by sending crafted Router Advertisement packets, an attacker on the local network could lower the Current Hop Limit and cause the system to lose the ability to communicate with another IPv6 node on a different network. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3175-2 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Alessandro Ghedini May 18, 2015 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : kfreebsd-9 CVE ID : CVE-2015-1414 CVE-2015-2923 Debian Bug : 779201 782735 It was discovered that by sending crafted Router Advertisement packets, an attacker on the local network could lower the Current Hop Limit and cause the system to lose the ability to communicate with another IPv6 node on a different network. Additionally, it was discovered that the patch applied to kfreebsd-9 in DSA-3175-1 for CVE-2015-1414 was incomplete. For reference the original advisory text follows: Mateusz Kocielski and Marek Kroemeke discovered that an integer overflow in IGMP processing may result in denial of service through malformed IGMP packets. For the oldstable distribution (wheezy), these problems have been fixed in version 9.0-10+deb70.10. We recommend that you upgrade your kfreebsd-9 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance kfreebsd-9 software to mitigate vulnerabilities concerning Router Advertisement packets on Debian-based platforms.. kfreebsd Security Update, Debian DSA-3175-2, Denial of Service, Network Risks. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 19, 2015 Critical Debian
87

Debian 9: DSA-3176-1 High: kfreebsd Integer Overflow Attack

Mateusz Kocielski and Marek Kroemeke discovered that an integer overflow in IGMP processing may result in denial of service through malformed IGMP packets. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3175-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff February 25, 2015 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : kfreebsd-9 CVE ID : CVE-2015-1414 Mateusz Kocielski and Marek Kroemeke discovered that an integer overflow in IGMP processing may result in denial of service through malformed IGMP packets. For the stable distribution (wheezy), this problem has been fixed in version 9.0-10+deb70.9. We recommend that you upgrade your kfreebsd-9 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The integer overflow vulnerability in IGMP handling can result in disruption of services. It is crucial to update kfreebsd packages to protect your systems.. kfreebsd Update, Denial Of Service, Debian Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 25, 2015 Important Debian
87

Debian kfreebsd-9 DSA-2743-1 Moderate: Privilege Escalation and Info Leak

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak. The Common Vulnerabilities and Exposures project identifies the following problems: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2743-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Aurelien Jarno August 27, 2013 http://www.debian.org/security/faq - ---------------------------------------------------------------------- Package : kfreebsd-9 Vulnerability : privilege escalation/information leak Problem type : local/remote Debian-specific: no CVE Id(s) : CVE-2013-3077 CVE-2013-4851 CVE-2013-5209 Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-3077 Clement Lecigne from the Google Security Team reported an integer overflow in computing the size of a temporary buffer in the IP multicast code, which can result in a buffer which is too small for the requested operation. An unprivileged process can read or write pages of memory which belong to the kernel. These may lead to exposure of sensitive information or allow privilege escalation. CVE-2013-4851 Rick Macklem, Christopher Key and Tim Zingelman reported that the FreeBSD kernel incorrectly uses client supplied credentials instead of the one configured in exports(5) when filling out the anonymous credential for a NFS export, when -network or -host restrictions are used at the same time. The remote client may supply privileged credentials (e.g. the root user) when accessing a file under the NFS share, which will bypass the normal access checks. CVE-2013-5209 Julian Seward and Michael Tuexen reported a kernel memory disclosure when initializing the SCTP state cookie being sent in INIT-ACK chunks, a buffer allocated from the kernel stack is not completely initialized. Fragments of kernel memory may be included in SCTP packets and transmitted over the network. For each SCTP session, there are two separate instances in which a 4-byte fragment may be transmitted. This memory might contain sensitive information, such as portions of the file cache or terminal buffers. This information might be directly useful, or it might be leveraged to obtain elevated privileges in some way. For example, a terminal buffer might include an user-entered password. For the stable distribution (wheezy), these problems has been fixed in version 9.0-10+deb70.3. We recommend that you upgrade your kfreebsd-9 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical alert has been issued concerning privilege elevation and data exposure flaws within kfreebsd-9 on Debian environments.. kfreebsd, freebsd kernel, privilege escalation, information leak, debian security. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 27, 2013 Important Debian
87

Ubuntu KfreeBSD-10 DSA-2820-2 Urgent: Security Flaw Detected

Konstantin Belousov and Alan Cox discovered that insufficient permission checks in the memory management of the FreeBSD kernel could lead to privilege escalation. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2714-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff June 25, 2013 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : kfreebsd-9 Vulnerability : programming error Problem type : remote Debian-specific: no CVE ID : CVE-2013-2171 Konstantin Belousov and Alan Cox discovered that insufficient permission checks in the memory management of the FreeBSD kernel could lead to privilege escalation. For the stable distribution (wheezy), this problem has been fixed in version 9.0-10+deb70.2. For the unstable distribution (sid), this problem has been fixed in version 9.0-12. We recommend that you upgrade your kfreebsd-9 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Inadequate authorization verifications within the FreeBSD core can result in potential elevation vulnerabilities. It is advisable to update kfreebsd-9 software packages.. kfreebsd Upgrade, Privilege Escalation, Debian Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 25, 2013 Critical Debian
87

Debian: DSA-2672-1 Critical: kfreebsd-9 Remote NFS Issue

Adam Nowacki discovered that the new FreeBSD NFS implementation processes a crafted READDIR request which instructs to operate a file system on a file node as if it were a directory node, leading to a kernel crash or potentially arbitrary code execution. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2672-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer May 22, 2013 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : kfreebsd-9 Vulnerability : interpretation conflict Problem type : remote Debian-specific: no CVE ID : CVE-2013-3266 Debian Bug : 706414 Adam Nowacki discovered that the new FreeBSD NFS implementation processes a crafted READDIR request which instructs to operate a file system on a file node as if it were a directory node, leading to a kernel crash or potentially arbitrary code execution. The kfreebsd-8 kernel in the oldstable distribution (squeeze) does not enable the new NFS implementation. The Linux kernel is not affected by this vulnerability. For the stable distribution (wheezy), this problem has been fixed in version 9.0-10+deb70.1. For the testing distribution (jessie) and the unstable distribution (sid), this problem has been fixed in version 9.0-11. We recommend that you upgrade your kfreebsd-9 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Explore the Debian DSA-2673-1 bulletin outlining a kfreebsd-10 security patch concerning a significant NFS vulnerability.. kfreebsd update,NFS security,Debian advisory,kernel execution,interpretation conflict. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 22, 2013 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here