kernel: scsi: do not fill dirty page content in the SG_IO buffer

The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace.

postgresql: information leak through constraint violation errors

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities

OpenShift: install script has temporary file creation vulnerability

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution

openshift-origin-msg-node-mcollective: /etc/cron.minutely/openshift-facts tmp file creation

In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.

Server: Malicious change set import due to insecure temporary file usage

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.

vdsm: /tmp file vulnerability issues

Insecure temporary file vulnerability in RedHat vsdm 4.9.6.

Monkey HTTP Daemon has local security bypass

A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing state when parsing 32 hex, 33 hex, or 34 hex byte values at the 0x47f offset. NOTE: A followup statement from Intel suggests that the root cause of this issue was an incorrectly configured EEPROM image.

cartridge: predictable /tmp in set-proxy connection hook

OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server.

python-docutils allows insecure usage of temporary files

gri before 2.12.18 generates temporary files in an insecure way.

kernel: mounting proc readonly on a different mount point silently mounts it rw if the /proc mount is rw

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.

Mondo 2.24 has insecure handling of temporary files.

mutt: denial of service via a series of requests to temporary files

Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.

kernel: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: driver core: Fix uevent_show() vs driver detach race

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

Improper account management vulnerability in NetIQ Advance Authentication

A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authentication before 6.3.5.1