SUSE SLED15 / SLES15 Security Update : spectre-meltdown-checker (SUSE-SU-2021:2861-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2861-1 advisory. spectre-meltdown-checker was updated to version 0.44 bsc1189477 - feat: add support for SRBDS related vulnerabilities - feat: add...

SUSE SLES12 Security Update : spectre-meltdown-checker (SUSE-SU-2021:2862-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2862-1 advisory. spectre-meltdown-checker was updated to version 0.44 bsc1189477 - feat: add support for SRBDS related vulnerabilities - feat: add zstd kerne...

Security update for spectre-meltdown-checker (moderate)

openSUSE Security Update: Security update for spectre-meltdown-checker Announcement ID: openSUSE-SU-2021:2861-1 Rating: moderate References: 1189477 Cross-References: CVE-2017-5753 CVSS scores: CVE-2017-5753 NVD : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2017-5753 SUSE: 7.1...

CVE-2017-17888

creationtimestamp| type| source ---|---|--- 2021-08-26 07:07:09+00:00| seen| MISP/abbf5767-dae4-4313-af05-b12573b4258b 2024-11-14 06:09:47+00:00| seen| MISP/00b8bda7-2b7e-4df7-bd5d-c89d45e2dfdc...

CVE-2017-9097

creationtimestamp| type| source ---|---|--- 2021-08-26 07:07:08+00:00| seen| MISP/07999c91-f34e-40d0-9807-b49414a5f070 2024-11-14 06:09:47+00:00| seen| MISP/bfc4948d-6571-4c25-9918-6c8f47ca4b6a...

SUSE: Security Advisory (SUSE-SU-2021:2834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

b2b (0.1.0), crust (>=0.0.7, <=0.0.65) +16 more potentially affected by CVE-2017-1000168 via sodiumoxide (>=0.0.4, <=0.0.13)

sodiumoxide CARGO version =0.0.4, =0.0.7, =0.5.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.4, =0.5.1, =0.0.1, =0.1.0 and more Source cves: CVE-2017-1000168 Source advisory: OSV:GHSA-2WC6-2RCJ-8V76...

blob (>=0.1.0, <=0.1.1), buzz (>=0.2.0, <=1.0.4) +51 more potentially affected by CVE-2017-1000430 via base64 (>=0.1.1, <=0.4.2)

base64 CARGO version =0.1.1, =0.1.0, =0.2.0, =0.1.4, =0.1.0, =0.5.1, =0.1.0, =0.1.9, =0.3.0, =0.2.0, =0.3.2, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.4.0 and more Source cves: CVE-2017-1000430 Source advisory: OSV:GHSA-X67X-VG9M-65C3...

aerial (0.1.0), afterparty (0.1.0) +345 more potentially affected by CVE-2017-18587 via hyper (>=0.0.1, <=0.9.14)

hyper CARGO version =0.0.1, =0.7.0, =0.1.0, =0.1.3, =0.5.1, =0.1.2, =0.5.3, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2017-18587 Source advisory: OSV:GHSA-Q89X-F52W-6HJ2...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +700 more potentially affected by CVE-2017-18589 via cookie (>=0.1.21, <=0.6.2)

cookie CARGO version =0.1.21, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.5.0, =0.6.5 and more Source cves: CVE-2017-18589 Source advisory: OSV:GHSA-VJRQ-CG9X-RFJP...

CVE-2017-8245 affecting package kernel 5.4.51-11

CVE-2017-8245 affecting package kernel 5.4.51-11. An upgraded version of the package is available that resolves this issue...

CVE-2017-8246 affecting package kernel 5.4.51-11

CVE-2017-8246 affecting package kernel 5.4.51-11. An upgraded version of the package is available that resolves this issue...

CVE-2017-8244 affecting package kernel 5.4.51-11

CVE-2017-8244 affecting package kernel 5.4.51-11. An upgraded version of the package is available that resolves this issue...

CVE-2017-7657

creationtimestamp| type| source ---|---|--- 2021-08-25 13:22:18+00:00| seen| https://t.me/truesecator/2035...

Format string

An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1.6.3 release CVE-2017-12613. The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Gnu Wget

CVE-2017-13089 CVE-2017-13089 的payload 的生成程序，此版本需要手动定位出需要执行的栈的地址 直接是也是有可能成功的 shellcode 部分中 buf 为利用msf生成出的普通payload 直接替换你所需的payload即可 使用方法如下： python shellcode.py&nc -lp 80payload...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to writing data beyond the buffer in memory, allowing attackers to execute malicious code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to writing beyond the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to the use of an insecure search path, allowing attackers to exploit their privileges.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to the use of an insecure search path. Exploiting these vulnerabilities can...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat 2019 and Adobe Acrobat Reader 2019, related to the manipulation of the null pointer, allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, and Adobe Acrobat 2017 is related to the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute malicious code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to...