sssd bug fix and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

ALBA-2021:4541 sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c

The nameserver caching daemon nscd in the GNU C Library aka glibc or libc6, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system...

CVE-2021-37850

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot...

CVE-2021-37850

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot...

CVE-2021-37850: Undefined Security Weakness

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot...

PT-2021-21889

Name of the Vulnerable Software and Affected Versions: ESET affected versions not specified Description: A vulnerability in ESET's consumer and business products for macOS allows a logged-on user to stop the ESET daemon, effectively disabling the protection of the ESET security product until a...

Denial Of Service (DoS)

cron is vulnerable to denial of service. The vulnerability exists due to a use-after-free and daemon crash due to a forcerescanuser error...

CVE-2021-36187

FortiWeb is affected by CVE-2021-36187, causing uncontrolled resource consumption that leads to denial of service of the webserver daemon via crafted HTTP requests. Affected versions include 6.4.0, 6.3.15 and below, and 6.2.5 and below. Root cause: uncontrolled resource consumption in the webserv...

CVE-2021-36187: Uncontrolled Resource Consumption

A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service for webserver daemon via crafted HTTP requests...

PT-2021-21168

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 6.4.0, 6.3.15 and below, 6.2.5 and below Description The issue is related to uncontrolled resource consumption, allowing an attacker to cause a denial of service for the webserver daemon via crafted HTTP requests...

NETGEAR Wi-Fi Router Code Execution

The vulnerability of the httpd microprogramming software in NETGEAR Wi-Fi routers such as R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX38v2, RAX40v2, RAX42, RAX43, RAX45, RAX48, RAX50, RAX50S, RAX75, RAX80, RAXE450, RAXE50...

ChurchInfo 1.2.13-1.3.0 Authenticated RCE

This module exploits the logic in the CartView.php page when crafting a draft email with an attachment. By uploading an attachment for a draft email, the attachment will be placed in the /tmpattach/ folder of the ChurchInfo web server, which is accessible over the web by any user. By uploading a...

[SECURITY] Fedora 35 Update: xen-4.15.1-2.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 35 Update: udisks2-2.9.4-1.fc35

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies...

New 'Shrootless' Bug Could Let Attackers Install Rootkit on macOS Systems

Microsoft on Thursday disclosed details of a new vulnerability that could allow an attacker to bypass security restrictions in macOS and take complete control of the device to perform arbitrary operations on the device without getting flagged by traditional security solutions. Dubbed "Shrootless"...

Information Disclosure

kotlin-daemon-client is vulnerable to information disclosure. The vulnerability exists due to the insecure file permissions used in temporary file creation, allowing a malicious user to read the data and list directories...

NewStart CGSL MAIN 6.02 : docker-ce Multiple Vulnerabilities (NS-SA-2021-0124)

The remote NewStart CGSL host, running version MAIN 6.02, has docker-ce packages installed that are affected by multiple vulnerabilities: - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege...

NewStart CGSL CORE 5.05 / MAIN 5.05 : cups Multiple Vulnerabilities (NS-SA-2021-0161)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has cups packages installed that are affected by multiple vulnerabilities: - A localhost.localdomain whitelist entry in validhost in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP...