Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information

The vulnerability exists in the file due to an incorrect limitation on the number of data items that can be viewed during regular expression searches. Exploiting this vulnerability allows malicious actors operating remotely to cause a service failure excessive CPU usage by using a specially craft...

Vulnerabilities in the Google Chrome browser, which allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in Google Chrome allow attackers to cause service failures or exert other types of influence on the system. This vulnerability is related to the loadtruetypeglyph function in the truetype/ttgload.c file of FreeType, as well as other functions and components...

The vulnerability of the Firefox ESR browser allows a malicious attacker to execute arbitrary code.

Mozilla Firefox ESR’s software contains a vulnerability in the nsDocShell::InternalLoad function. Exploiting this vulnerability allows an attacker to execute arbitrary code by performing “cross-site scripting” attacks using specially crafted network requests...

CVE-2016-1606

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via 1 the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, 2 the CPName property value to...

Selfrando Technique Mitigates Attacks Unmasking Tor Users

The FBI’s apparent capability to unmask users of the Tor Network has caused hand-wringing among those concerned with privacy and civil liberties, many of whom are busy trying to win legal battles to get law enforcement to confess as to how they’re doing it. A team of academics and researchers,...

PT-2016-6209

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description The issue is related to a use-after-free vulnerability in the xcf load image function, which can be triggered by a crafted XCF file. This could allow remote attackers to cause a denial of servic...

Microsoft Windows - Custom Font Disable Policy Bypass

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=779 Windows: Custom Font Disable Policy Bypass Platform: Windows 10 Only Class: Security Feature Bypass Summary: It’s possible to bypass the ProcessFontDisablePolicy check in win32...

USN-3011-1: HAProxy vulnerability

Falco Schmutz discovered that HAProxy incorrectly handled the reqdeny filter. A remote attacker could use this issue to cause HAProxy to crash, resulting in a denial of service...

The vulnerability of Google Chrome allows a perpetrator to load arbitrary modules or obtain confidential information.

The vulnerability of the createCustomType function in the extensions/renderer/resources/binding.js module of Google Chrome’s bindings extension is related to the lack of type checking for the modules. Exploiting this vulnerability could allow a malicious actor to load any modules remotely or obta...

Microsoft Office OLE DLL End Load Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A security vulnerability exists in Microsoft Office that originates from the program failing to properly...

glibc: getaddrinfo() writes DNS queries to random file descriptors under high load

It was discovered that, under certain circumstances, glibc's getaddrinfo function would send DNS queries to random file descriptors. An attacker could potentially use this flaw to send DNS queries to unintended recipients, resulting in information disclosure or data loss due to the application...

Google Chrome FrameLoader::startLoad Same Origin Policy Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. In versions of Google Chrome prior to 51.0.2704.79, the Blink/WebKit/Source/core/loader/FrameLoader.cpp/FrameLoader::startLoad function fails to prevent frame navigation in the DocumentLoader separation operation. A same-origin policy bypa...

The vulnerability of the PHP interpreter allows attackers to read arbitrary files or write to them.

The vulnerability of the PHP interpreter lies in the lack of checks for the sequence “%00” in the path name. Exploiting this vulnerability allows an attacker to read arbitrary files or write to them using specially crafted input data for an application that calls the method DOMDocument.load, the...

Tor Hidden Services Load Balancing: OnionBalance

Tor Hidden Services Load Balancing The OnionBalance software allows for Tor hidden service requests to be distributed across multiple backend Tor instances. OnionBalance provides load-balancing while also making onion services more resilient and reliable by eliminating single points-of-failure...

Modern Reverse Proxy: Traefik

Modern Reverse Proxy Træfɪk is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It supports several backends Docker , Swarm , Mesos/Marathon , Kubernetes , Consul , Etcd , Zookeeper , BoltDB , Rest API, file… to manage its configuration automatically and...

libdwarf '_dwarf_load_section' function denial of service vulnerability

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfloadsection' function of libdwarf. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

HackerOne: Denial of service in report view.

Hello Team! First of all thank you for acknowledging my feature request, I know it will help a lot of users. Description: ========== I just wanted to report a potential vulnerability on the report view functionality. For obvious reasons I'm using my sandboxed team on an alternate account to test...

Adobe Flash - .MP4 Stack Corruption

Adobe Flash - .MP4 Stack Corruption Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=760 The attached mp4 file causes stack corruption in flash. To load, put LoadMP42.swf on a server and load http://127.0.0.1/LoadMP42.swf?file=t.mp4. Proof of Concept:...

Red Hat OpenShift Enterprise HAProxy Information Disclosure Vulnerability

Red Hat OpenShift is a platform-as-a-service cloud computing platform that builds, tests, deploys, and runs applications.HAProxy is an open source TCP/HTTP load balancing server. An information disclosure vulnerability exists in HAProxy used by Red Hat OpenShift Enterprise, allowing remote...