漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 A vulnerability was reported in the CloudFormation bootstrap tools, different from the one in CVE-2017-9450 , where default behavior in the handling of cfn-init metadata can provide escalated privileges to an attacker with local ac…
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Out-of-bounds read in fr_dhcp_decode_options(): An out-of-bounds read flaw was found in the way FreeRADIUS server handles decoding of DHCP packets. A remote attacker could use this flaw to crash the FreeRADIUS server by sending a s…
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 possible OP-TEE Bleichenbacher attack: The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which …
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 ap_find_token() buffer overread: A buffer over-read flaw was found in the httpd's ap_find_token() function. A remote attacker could use this flaw to cause httpd child process to crash via a specially crafted HTTP request. (CVE-2017…
漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Security constrained bypass in error page mechanism: A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly includin…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for nasm to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Mal…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for nasm to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 漏洞危害 This vulnerability could be exploite…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for the linux kernel to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This …
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libzypp, zypper to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This v…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for mariadb to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP3 SU…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for wireshark to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability can be used to cause a limited…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for systemd to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 漏洞危害 This vulnerabi…
漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for varnish to fix the vulnerabilities. 漏洞危害 Successful exploitation of the vulnerability will lead to a Denial of Service. 解决方案 Refer to Debian security advisory DSA 3924-1 to address this issue and o…
漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for freerdp to fix the vulnerabilities. 漏洞危害 Successful exploitation of the vulnerability will lead to a malicious remote server or a man-in-the-middle to either cause a DoS by forcibly terminating the…
漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for mysql-5.5 to fix the vulnerabilities. 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Refer to Debian security advisory DSA 3922-1 to address this issue and obtain furth…
漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for enigmail to fix the vulnerabilities. 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Refer to Debian security advisory DSA 3921-1 to address this issue and obtain furthe…
漏洞类别：RedHat 漏洞等级： 漏洞信息 GStreamer is a streaming media framework based on graphs of filters which operate on media data. Multiple flaws were found in gstreamer1, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-bad-free packages. An atta…
漏洞类别：RedHat 漏洞等级： 漏洞信息 Git is a distributed revision control system with a decentralized architecture. It was found that the git-prompt.sh script shipped with git failed to correctly handle branch names containing special characters. A specially crafted git re…
漏洞类别：RedHat 漏洞等级： 漏洞信息 Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine archi…
漏洞类别：RedHat 漏洞等级： 漏洞信息 PostgreSQL is an advanced object-relational database management system (DBMS). It was found that some selectivity estimation functions did not check user privileges before providing information from pg_statistic, possibly leaking informa…
漏洞类别：RedHat 漏洞等级： 漏洞信息 The bash packages provide Bash (Bourne-again shell), which is the default shell for Red Hat Enterprise Linux. An arbitrary command injection flaw was found in the way bash processed the hostname value. A malicious DHCP server could use t…
漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for moodle to fix the vulnerability. Affected OS: Fedora 25 Fedora 24 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. 解决方案 Fedora has issued updated packages…
漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for jackson-databind to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerab…
漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for mingw-c-ares to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. 解决方案 Fedora has issued updated packages to …
漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for seamonkey to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerability. …