CVE-2018-12206

Improper configuration of hardware access in Intel QuickAssist Technology for Linux all versions may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2018-12206

Improper configuration of hardware access in Intel QuickAssist Technology for Linux all versions may allow an authenticated user to potentially enable a denial of service via local access...

Compromising vital infrastructure: the power grid

Where were you when the lights went out? That line became famous after the 1977 blackout in New York City. This power outage was caused by lightning and lasted for up to two days, depending on which part of New York you lived in. While in this case the power grid failure was a freak incident due ...

Xen Project INVPCID with Non-Canonical Addresses DoS (XSA-279)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a guest-to-host denial of service vulnerability. An attacker located on a guest virtual machine may be able to exploit this vulnerability to affect the availability of the host system. On...

Super Micro Says Its Gear Wasn't Bugged By Chinese Spies

U.S.-based computing vendor Super Micro has issued the findings of an investigation that it says proves that its hardware was not bugged by the Chinese government. Super Micro, which specializes in green computing for data centers and cloud computing, enterprise IT, big data, high performance...

Supply Chain Security: Managing a Complex Risk Profile

NYC — From Delta Airlines to Best Buy, a number of big-name companies were involved this year in data breaches – but even though their names made headlines, the actual security incidents occurred due to flaws in third-party partners. Across the board, companies are scratching their heads trying t...

Framework for Rogue Wi-Fi Access Point Attack: WiFi-Pumpkin

The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target. It comes stuffed with features, including rogue Wi-Fi access points, deauth attacks on client APs, a probe request and credentials monitor,...

Intel® QuickAssist Technology for Linux Advisory

Summary: A potential security vulnerability in Intel® QuickAssist Technology for Linux may allow denial of service. Intel is releasing documentation and software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2018-12206 Description: Improper configuration o...

Xen Denial of Service and Elevation of Privilege Vulnerabilities

Xen is an open source virtual machine monitor developed by the Xen Project. A Denial of Service and Elevation of Privilege vulnerability exists in Xen 4.11, which stems from a failure to properly handle x86 IOREQ server resource accounting for use with external emulators and can be exploited by a...

UBUNTU-CVE-2018-19967

An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service host OS hang because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix...

ALPINE-CVE-2018-19967

An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service host OS hang because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix...

Banks Attacked through Malicious Hardware Connected to the Local Network

Kaspersky is reporting on a series of bank hacks -- called DarkVishnya -- perpetrated through malicious hardware being surreptitiously installed into the target network: In 2017-2018, Kaspersky Lab specialists were invited to research a series of cybertheft incidents. Each attack had a common...

KoffeyMaker: notebook vs. ATM

Despite CCTV and the risk of being caught by security staff, attacks on ATMs using a direct connection — so-called black box attacks — are still popular with cybercriminals. The main reason is the low "entry requirements" for would-be cyber-robbers: specialized sites offer both the necessary tool...

USN-3836-2: Linux kernel (HWE) vulnerabilities

USN-3836-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Jann Horn discovered that the Linux kernel mishandles mapping UID or GID ranges inside...

USN-3836-2 linux-hwe, linux-gcp vulnerabilities

USN-3836-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Jann Horn discovered that the Linux kernel mishandles mapping UID or GID ranges inside...

Ubuntu: Security Advisory (USN-3836-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2018:3835-1 Security update for chromium

This update contains Chromium 70.0.3538.102 and fixes security issues and bugs. Vulnerabilities fixed in 70.0.3538.102: - CVE-2018-17478: Out of bounds memory access in V8 boo1115537 Vulnerabilities fixed in 70.0.3538.67 bsc1112111: - CVE-2018-17462: Sandbox escape in AppCache - CVE-2018-17463:...

insufficient TLB flushing / improper large page mappings with AMD IOMMUs

ISSUE DESCRIPTION In order to be certain that no undue access to memory is possible anymore after IOMMU mappings of this memory have been removed, Translation Lookaside Buffers TLBs need to be flushed after most changes to such mappings. Xen bypassed certain IOMMU flushes on AMD x86 hardware...

Kaspersky Security Bulletin 2018. Threat Predictions for 2019

Cryptocurrency threat predictions for 2019 Threat predictions for industrial security in 2019 Cyberthreats to financial institutions 2019: overview and predictions There's nothing more difficult than predicting. So, instead of gazing into a crystal ball, the idea here is to make educated guesses...

PT-2018-10958 · Samsung +1 · Samsung T5 +6

Name of the Vulnerable Software and Affected Versions: Samsung 840 EVO versions affected versions not specified Samsung 850 EVO versions affected versions not specified Samsung T3 versions affected versions not specified Samsung T5 versions affected versions not specified Crucial MX100 versions...