[SECURITY] [DLA 2378-1] openssl1.0 security update

Debian LTS Advisory DLA-2378-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 25, 2020 https://wiki.debian.org/LTS Package : openssl1.0 Version : 1.0.2u-1deb9u2 CVE ID : CVE-2020-1968 Robert Merget, Marcus Brinkmann, Nimrod Aviram, and Juraj Somorovs...

Ubuntu: Security Advisory (USN-4504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1968

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman DH based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted...

CVE-2020-1968

CVE-2020-1968 describes the Raccoon attack on TLS DH ciphersuites, where re-use of a DH secret allows an attacker to compute the pre‑master secret and eavesdrop on the TLS connection. Affected: OpenSSL 1.0.2 (downstreamly out of public updates) with affected range 1.0.2-1.0.2v. OpenSSL 1.1.1 is n...

Vulnerability in OpenSSL - Raccoon Attack

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman DH based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted...

OpenSSL: Raccoon Attack (CVE-2020-1968) - Linux

OpenSSL is prone to Racoon attacks. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

OpenSSL: Raccoon Attack (CVE-2020-1968) - Windows

OpenSSL is prone to Racoon attacks. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

Huawei EulerOS: Security Advisory for gvfs (EulerOS-SA-2019-1968)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1968-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco NX-OS Software NX-API Denial of Service Vulnerability (CVE-2019-1968)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service vulnerability in the NX-API of Cisco NX-OS Software due to incorrect validation of HTTP requests. An unauthenticated, remote attacker could exploit this, by sending a crafted HTTP request to the NX-API...

CVE-2019-1968

CVE-2019-1968 affects Cisco NX-OS Software NX-API. The vulnerability stems from incorrect validation of the HTTP header in requests to the NX-API, allowing an unauthenticated remote attacker to trigger a DoS by restarting the NX-API system process. The NX-OS device itself can still forward traffi...

RHEL 7 : qemu-kvm-rhev (RHSA-2019:1968)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1968 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

Important: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7. Red Hat Product Security has rated this update as having a Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities (CVE-2018-1902, CVE-2018-1968, CVE-2019-4046)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities due to remote attacks, sensitive information exposure, and Denial of Service attacks. Vulnerability Details CVEID: CVE-2018-1902 DESCRIPTION: IBM WebSphere Application Server could allow a...

CVE-2017-1968

...

CVE-2017-1968

This CVE entry is rejected/not used; the candidate number was not assigned to any issues.

gambling-affiliation.com XSS vulnerability

Vulnerable URL: https://www.gambling-affiliation.com/tracking/visuels/1968.swf?clickTAG=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 112928 VI...

openSUSE Security Update : Firefox (openSUSE-2016-334)

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues : MozillaFirefox was updated to Firefox 45.0 boo969894 - requires NSPR 4.12 / NSS 3.21.1 - Instant browser tab sharing through Hello - Synced Tabs button in button bar - Tabs synced via Firefox Accounts from othe...

CVE-2016-1968

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted data with brotli compression...

DEBIAN-CVE-2016-1968

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow via crafted data with brotli compression...