Oracle Vm Server vulnerabilities

• oracle linux, vm, vm server +2 more In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options,... CVE-2023-22024 5.5 MediumSeptember 20, 2023
• oracle vm server, oracle corporation ldoms +1 more Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates).... CVE-2020-2571 3.3 LowJanuary 15, 2020
• oracle vm server, ldoms +1 more Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite ... CVE-2017-3242 5.9 MediumJanuary 27, 2017
• linux kernel, oracle linux, vm server +2 more The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of... CVE-2016-7039 Fix available 7.5 HighOctober 10, 2016
• isc bind, hp hp-ux, oracle linux +2 more +4 more buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11... CVE-2016-2776 Public exploitFix available EPSS 89.5% 7.5 HighSeptember 27, 2016
• libtiff, oracle vm server +1 more The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers... CVE-2016-3632 Fix available 7.8 HighSeptember 21, 2016
• libtiff, oracle vm server +1 more Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0... CVE-2016-3990 Fix available 7.8 HighSeptember 4, 2016
• libtiff, oracle vm server +1 more Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba... CVE-2016-3945 Fix available 7.8 HighSeptember 4, 2016
• libtiff, oracle vm server +1 more Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and... CVE-2016-3991 Fix available 7.8 HighAugust 30, 2016
• linux kernel, oracle linux, vm server +2 more The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after... CVE-2016-6198 Fix available 5.5 MediumAugust 6, 2016
• linux kernel, oracle linux, vm server +2 more fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does... CVE-2016-6197 Fix available 5.5 MediumAugust 6, 2016
• linux kernel, google android, oracle vm server +2 more net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of... CVE-2016-5696 Public exploitFix available EPSS 14.5% 4.8 MediumJuly 31, 2016
• qemu, canonical ubuntu linux, debian linux +9 more +11 more The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to... CVE-2016-5403 Fix available 5.5 MediumJuly 30, 2016
• linux kernel, oracle linux, novell suse linux enterprise real time extension +11 more +13 more The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does... CVE-2016-4470 Fix available 5.5 MediumJune 27, 2016
• xmlsoft libxml2, apple icloud, iphone os +15 more +17 more Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact... CVE-2016-4448 Fix available 9.8 CriticalJune 9, 2016
• xen, oracle vm server +1 more The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause... CVE-2016-4962 Fix available 6.7 MediumJune 7, 2016
• xmlsoft libxml2, apple iphone os, itunes +8 more +10 more The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent... CVE-2016-4447 Fix available EPSS 14.0% 7.5 HighMay 30, 2016
• xen, oracle vm server +1 more The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not... CVE-2016-4480 Fix available 8.4 HighMay 18, 2016
• qemu, canonical ubuntu linux, citrix xenserver +8 more +10 more Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of... CVE-2016-3712 Fix available 5.5 MediumMay 9, 2016
• qemu, canonical ubuntu linux, citrix xenserver +11 more +13 more The VGA module in QEMU improperly performs bounds checking on banked access to video memory,... CVE-2016-3710 Fix available 8.8 HighMay 9, 2016
• xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 more The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery... CVE-2016-3627 Public exploitFix available 7.5 HighMay 3, 2016
• linux kernel, canonical ubuntu linux, oracle vm server +2 more The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4... CVE-2016-2117 Fix available 7.5 HighMay 2, 2016
• xen, fedoraproject fedora, oracle vm server +2 more Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a... CVE-2016-3960 Fix available 8.8 HighApril 19, 2016
• xen, debian linux, fedoraproject fedora +1 more +3 more The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the... CVE-2016-3159 Fix available 3.8 LowApril 13, 2016
• xen, fedoraproject fedora, oracle vm server +2 more The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the... CVE-2016-3158 Fix available 3.8 LowApril 13, 2016
• openbsd openssh, oracle vm server +1 more Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote... CVE-2016-3115 Public exploitFix available EPSS 35.5% 6.4 MediumMarch 10, 2016
• mozilla firefox, network security services, apple iphone os +9 more +11 more Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x... CVE-2016-1950 Fix available 8.8 HighMarch 8, 2016
• xen, debian linux, fedoraproject fedora +1 more +3 more Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot... CVE-2016-2270 Fix available 6.8 MediumFebruary 19, 2016
• libtiff, oracle linux, vm server +3 more +5 more Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in... CVE-2015-8668 Fix available EPSS 13.7% 9.8 CriticalJanuary 8, 2016
• isc bind, oracle linux, solaris +1 more +3 more db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers... CVE-2015-8000 Fix available EPSS 55.9% 5.0 MediumDecember 15, 2015
• openssl, apple mac os x, canonical ubuntu linux +21 more +23 more The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0... CVE-2015-3195 Public exploitFix available EPSS 38.7% 5.3 MediumDecember 3, 2015
• isc bind, apple os x server, canonical ubuntu linux +18 more +20 more named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to... CVE-2015-5477 In KEVPublic exploitFix available EPSS 99.6% 7.8 HighJuly 28, 2015
• mozilla network security services, debian linux, novell suse linux enterprise desktop +4 more +6 more Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,... CVE-2015-2730 Fix available 4.3 MediumJuly 5, 2015
• mozilla network security services, canonical ubuntu linux, debian linux +5 more +7 more Mozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,... CVE-2015-2721 Fix available 4.3 MediumJuly 4, 2015
• oracle vm server Unspecified vulnerability in the Oracle VM Server for SPARC component in Oracle Sun Systems... CVE-2015-0452 4.3 MediumApril 16, 2015
• mozilla firefox, network security services, seamonkey +10 more +12 more Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0,... CVE-2014-1491 Fix available 4.3 MediumFebruary 6, 2014
• mozilla firefox, network security services, seamonkey +10 more +12 more Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in... CVE-2014-1490 Fix available 9.3 HighFebruary 6, 2014
• mozilla firefox, network security services, seamonkey +9 more +11 more The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in... CVE-2013-0791 Fix available 5.0 MediumApril 3, 2013
• mozilla network security services, canonical ubuntu linux, oracle enterprise manager ops center +12 more +14 more The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider... CVE-2013-1620 Fix available 4.3 MediumFebruary 8, 2013