漏洞类别：RedHat 漏洞等级： 漏洞信息 The kernel packages contain the Linux kernel, the core of any Linux operating system. It was found that reporting emulation failures to user space could lead to either a local (CVE-2014-7842) or a L2->L1 (CVE-2010-5313) denial of serv…

漏洞类别：Local 漏洞等级： 漏洞信息 Hangul (also known as Hangul Word Processor or HWP) is a proprietary word processing application from Hancom Inc.. Hangul has specialized support for Korean language. Hangul Word Processor is prone to a heap-based buffer overflow vulnerab…

漏洞类别：Local 漏洞等级： 漏洞信息 Tableau Server, by Tableau Software, is an online solution for sharing, distributing, and collaborating on content created in Tableau. Shareable. Create workbooks and views, dashboards, and data sources in Tableau Desktop, and then publis…

漏洞类别：General remote services 漏洞等级： 漏洞信息 GitHub is a web-based Git or version control repository and Internet hosting service. There is a bug that resulted in a static value being used as the Ruby on Rails session secret for GitHub Enterprise's management conso…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for librsvg to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP3 SU…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libxml2 to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability could be exploited to gain parti…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for puppet to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Desktop 12-SP3 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This vulnerability could be exploited to gain partial access to sens…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for tcmu-runner to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 漏洞危害 This vulnerability can be used to cause a limit…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for ncurses to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability could be exploited to gain parti…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Issue Overview: Exploitable memory corruption due to UFO to non-UFO path switch (CVE-2017-1000112 ) heap out-of-bounds in AF_PACKET sockets (CVE-2017-1000111 ) QID Detection Logic: This authenticated QID verifies if the version of …

漏洞类别：RedHat 漏洞等级： 漏洞信息 The kernel packages contain the Linux kernel, the core of any Linux operating system. An use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this…

漏洞类别：RedHat 漏洞等级： 漏洞信息 The gtk-vnc packages provide a VNC viewer widget for GTK. It was found that gtk-vnc lacked proper bounds checking while processing messages using RRE, hextile, or copyrect encodings. A remote malicious VNC server could use this flaw to c…

漏洞类别：RedHat 漏洞等级： 漏洞信息 MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A dat…

漏洞类别：RedHat 漏洞等级： 漏洞信息 OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. A covert timing channel flaw was found in the way OpenSSH handled authentication of non-existent users. A remote unauthenticat…

漏洞类别：RedHat 漏洞等级： 漏洞信息 The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. A stack overflow vulnerabi…

漏洞类别：RedHat 漏洞等级： 漏洞信息 Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while …

漏洞类别：RedHat 漏洞等级： 漏洞信息 The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Multiple integer overflow flaws leading to heap-based buffer overflows were fou…

漏洞类别：RedHat 漏洞等级： 漏洞信息 The X11 (Xorg) libraries provide library routines that are used within all X Window applications. An integer overflow flaw leading to a heap-based buffer overflow was found in libXpm. An attacker could use this flaw to crash an applicati…

漏洞类别：RedHat 漏洞等级： 漏洞信息 Libtasn1 is a library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functi…

漏洞类别：RedHat 漏洞等级： 漏洞信息 LibreOffice is an open source, community-developed office productivity suite. An out-of-bounds write flaw was found in the way Libreoffice rendered certain documents containing Polygon images. By tricking a user into opening a specially …

漏洞类别：RedHat 漏洞等级： 漏洞信息 The tcpdump packages contain the tcpdump utility for monitoring network traffic. Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create…

漏洞类别：RedHat 漏洞等级： 漏洞信息 Red Hat Certificate System is an enterprise software system designed to manage enterprise public key infrastructure (PKI) deployments. It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that LXC incorrectly handled the TIOCSTI ioctl. 漏洞危害 An attacker could possibly use this issue to escape LXC containers. 解决方案 Refer to Ubuntu advisory USN-3375-1 for affected packages and patching details, or update wit…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that RabbitMQ incorrectly handled MQTT (MQ Telemetry Transport) authentication. 漏洞危害 A remote attacker could use this issue to authenticate successfully with an existing username by omitting the password. 解决方案 Refer to …

漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administra…