SUSE SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:3732-1)

This update for openssl-100 fixes the following issues : CVE-2020-1971: Fixed a NULL pointer dereference in EDIPARTYNAME bsc1179491. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

RHEL 8 : mysql:8.0 (RHSA-2020:3732)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3732 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...

Oracle Linux 8 : mysql:8.0 (ELSA-2020-3732)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3732 advisory. mysql 8.0.21-1 - Rebase to 8.0.21 - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0 - Check that we have correct versions in bundled Provides...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Software Architect and Rational Software Architect for WebSphere Software

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by IBM Rational Software Architect and Rational Software Architect for WebSphere Software.These CVE's CVE-2018-1656, CVE-2018-12539, CVE-2018-0705, CVE-2018-3732 and CVE-2018-3736 were...

Security Bulletin: Vulnerabilities in OpenSSL affect Sterling Connect:Express for UNIX (CVE-2016-7055, CVE-2017-3731 and CVE-2017-3732)

Summary OpenSSL vulnerabilities were disclosed on January 26, 2017 by the OpenSSL Project. OpenSSL is used by IBM Sterling Connect:Express for UNIX. IBM Sterling Connect:Express for UNIX has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-7055 DESCRIPTION: OpenSSL is vulnerab...

Security Bulletin: Vulnerabilities in GSKit affects IBM Sterling Connect:Direct for UNIX

Summary A vulnerability has been addressed in the GSKit component of IBM Sterling Connect:Direct for UNIX. Further, OpenSSL vulnerabilities disclosed by the OpenSSL Project affect GSKit. IBM Sterling Connect:Direct for UNIX uses GSKit and therefore is also vulnerable. Vulnerability Details CVEID:...

Security Bulletin: Multiple vulnerabilities in GSKit affect IBM Workload Scheduler

Summary GSKit is used by IBM Workload Manager and is vulnerable to some OpenSSL vulnerabilities. IBM Workload Manager has addressed the applicable CVEs using an updated version of GSKit libraries. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service...

Security Bulletin: OpenSSL vulnerabilites impacting IBM Aspera Connect 3.7.4 and earlier (CVE-2017-3732, CVE-2016-7055)

Summary The OpenSSL vulnerabilities CVE-2017-3732 CVE-2016-7055 impact IBM Aspera Connect version 3.7.4 and earlier. The fix is delivered in IBM Aspera Connect 3.8.0. Vulnerability Details CVEID: CVE-2017-3732 DESCRIPTION: There is a carry propagating bug in the x8664 Montgomery squaring procedur...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect WebSphere Message Broker and IBM Integration Bus

Summary The DataDirect ODBC Drivers used by WebSphere Message Broker and IBM Integration Bus have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3731 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read when using a specific cipher. By...

Adobe FrameMaker 2019 < 15.0.5 (2019.0.5) Arbitrary Code Execution (APSB20-04)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2019 15.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-04 advisory. - Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability...

CVE-2020-3732

CVE-2020-3732 affects Adobe FrameMaker 2019.0.4 and earlier, with an out-of-bounds write that could lead to arbitrary code execution. Related sources confirm remote-code-execution potential (e.g., IFF file parsing) and indicate a patch is available: FrameMaker 2019.0.5 mitigates the issue (APSB20...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2017-3730, CVE-2017-3732, CVE-2016-7055, CVE-2016-8610)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3730 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a...

CVE-2007-3732

creationtimestamp| type| source ---|---|--- 2019-11-08 00:28:10+00:00| seen| https://t.me/cibsecurity/7987 2024-02-05 13:17:21+00:00| seen| https://t.me/ctinow/179178...

CVE-2007-3732

The CVE-2007-3732 issue affects Linux 2.6 up to before 2.6.23, involving the TRACE_IRQS_ON function in iret_exc. The root cause is calling a C function without ensuring that processor segments are correctly set, specifically failing to restore the kernel %fs before the call and before enabling in...

Security Bulletin: Multiple vulnerabilities in Open Source OpenSSL and Samba affects IBM Netezza Host Management

Summary Open Source OpenSSL and Samba are used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVEs Vulnerability Details CVEID: CVE-2017-3731 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read when using a specific...

CVE-2019-3732

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 in 4.0.x and versions prior to 4.1.3.3 in 4.1.x, and RSA Micro Edition Suite, versions prior to 4.0.11 in 4.0.x versions prior to 4.1.6.1 in 4.1.x and versions prior to 4.3.3 4.2.x and 4.3.x are vulnerable to an Information Exposure...

CVE-2019-3732

CVE-2019-3732 affects Dell RSA BSAFE Crypto-C Micro Edition (pre-4.0.5.3 in 4.0.x and pre-4.1.3.3 in 4.1.x) and Dell RSA BSAFE Micro Edition Suite (pre-4.0.11 in 4.0.x, pre-4.1.6.1 in 4.1.x, pre-4.3.3 in 4.2.x/4.3.x). The vulnerability is an Information Disclosure Through Timing Discrepancy, allo...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2018 - Includes Oracle Jul 2018 CPU affects DB2 Recovery Expert for Linux, Unix and Windows

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6, Version 7 ,version 8, that is used by DB2 Recovery Expert for Linux, Unix and Windows. These issues were disclosed as part of the IBM Java SDK updates in July 2018. Vulnerability Details CVEID: CVE-2016-07...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Privileged Identity Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Security Privileged Identity Manager ISPIM. These issues were disclosed as part of the IBM Java SDK updates in July 2018, April 2018, January 2018, October 2017. Vulnerability Details July 2018 CVEID:...

Security Bulletin: IBM Cognos Controller 2019Q2 Security Updater: Multiple vulnerabilities have been identified in IBM Cognos Controller

Summary This bulletin addresses several security vulnerabilities that are fixed in IBM Cognos Controller. There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 7 and the IBM® Runtime Environment Java™ Technology Edition, Version 8 that are used by IBM...