CVSS: 2.9EPSS: 0%CPEs: 27EXPL: 0CVE-2015-3340
https://notcve.org/view.php?id=CVE-2015-3340
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request. Xen 4.2.x hasta 4.5.x no inicializa ciertos campos, lo que permite a ciertos dominios de servicio remotos obtener información sensible de la memoria a través de una solicitud (1) XEN_DOMCTL_gettscinfo o (2) XEN_SYSCTL_getdomaininfolist. • http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156005.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156979.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157006.html http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html http://www.debian.org/security/2015/dsa-3414 h • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 3.3EPSS: 1%CPEs: 9EXPL: 2CVE-2015-2922 – kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.
https://notcve.org/view.php?id=CVE-2015-2922
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message. La función ndisc_router_discovery en net/ipv6/ndisc.c en la implementación de protocolo Neighbor Discovery (ND) en la pila IPv6 en el kernel de Linux anterior a 3.19.6 permite a atacantes remotos reconfigurar una configuración 'hop-limit' a través de un valor hop_limit pequeño en un mensaje Router Advertisement (RA). It was found that the Linux kernel's TCP/IP protocol suite implementation for IPv6 allowed the Hop Limit value to be set to a smaller value than the default one. An attacker on a local network could use this flaw to prevent systems on that network from sending or receiving network packets. • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6fd99094de2b83d1d4c8457f2c83483b2828e75a http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155804.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155854.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155908.html http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html http:&# • CWE-17: DEPRECATED: Code CWE-454: External Initialization of Trusted Variables or Data Stores •
CVSS: 6.8EPSS: 3%CPEs: 12EXPL: 0CVE-2015-1858
https://notcve.org/view.php?id=CVE-2015-1858
Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image. Múltiples desbordamientos del buffer en gui/image/qbmphandler.cpp en el módulo QtBase en Qt en versiones anteriores a 4.8.7 y 5.x en versiones anteriores a 5.4.2 permiten a atacantes remotos provocar una denegación de servicio (fallo de segmentación y caída) y posiblemente ejecutar código arbitrario a través de una imagen BMP manipulada. • http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html http://lists.qt-project.org/pipermail/announce/2015-April/000067.html http://www.securityfocus.com/bid/74309 ht • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 3%CPEs: 12EXPL: 0CVE-2015-1859
https://notcve.org/view.php?id=CVE-2015-1859
Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image. Múltiples desbordamientos de buffer en plugins/imageformats/ico/qicohandler.cpp en el módulo QtBase en Qt en versiones anteriores a 4.8.7 y 5.x en versiones anteriores a 5.4.2 permiten a atacantes remotos provocar una denegación de servicio (fallo de segmentación y caída) y posiblemente ejecutar código arbitrario a través de una imagen ICO manipulada. • http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html http://lists.qt-project.org/pipermail/announce/2015-April/000067.html http://www.securityfocus.com/bid/74307 ht • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 4%CPEs: 12EXPL: 0CVE-2015-1860
https://notcve.org/view.php?id=CVE-2015-1860
Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image. Múltiples desbordamientos de buffer en gui/image/qgifhandler.cpp en el módulo QtBase en Qt en versiones anteriores a 4.8.7 y 5.x en versiones anteriores a 5.4.2 permiten a atacantes remotos provocar una denegación de servicio (fallo de segmentación) y posiblemente ejecutar código arbitrario a través de una imagen GIF manipulada. • http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155947.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155962.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155976.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156727.html http://lists.fedoraproject.org/pipermai • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •