Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.13 bug fix and security update

Red Hat OpenShift Container Platform release 4.6.13 is now available with updates to packages and images that fix several bugs. This release also includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update

Red Hat OpenShift Container Platform release 4.6.13 is now available with updates to packages and images that fix several bugs. A security update for cri-o, openshift, openshift-clients, openshift-kuryr, and skopeo is now also available for Red Hat OpenShift Container Platform 4.6. Red Hat Produc...

RHEL 7 / 8 : OpenShift Container Platform 4.6.13 (RHSA-2021:0172)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0172 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.8 security and bug fix update

Red Hat OpenShift Container Platform release 4.6.8 is now available with updates to packages and images that fix several bugs. This release includes a security update for openshift-enterprise-builder-container for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this...

CVE-2020-8564 vulnerabilities

Vulnerabilities for packages: spark-operator...

CVE-2020-8564 vulnerabilities

Vulnerabilities for packages: spark-operator...

CVE-2020-8564

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects v1.19.3, v1.18.10, v1.17.13...

CVE-2020-8564 Docker config secrets leaked when file is malformed and loglevel >= 4

In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects v1.19.3, v1.18.10, v1.17.13...

CVE-2020-8564

CVE-2020-8564 (Kubernetes Docker config leak) In Kubernetes clusters, when the logging level is at least 4, processing a malformed docker config file can cause the contents of that file to be leaked, potentially exposing registry credentials such as pull secrets. Affected versions are those older...

CVE-2019-8564

CVE-2019-8564 describes a logic issue resolved by improved validation, fixed in macOS Mojave 10.14.4 and Security Update 2019-002 for High Sierra/Sierra. An attacker in a privileged network position could modify driver state. The initial description provides affected platforms and the remediation...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update

An update for jenkins-2-plugins, openshift-clients, podman, runc, and skopeo is now available for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2020-8564

creationtimestamp| type| source ---|---|--- 2020-10-19 07:56:11+00:00| seen| https://t.me/k8security/128 2020-12-08 00:30:22+00:00| seen| https://t.me/cibsecurity/17222...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1287-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12127: Microarchitectura...

CVE-2018-8564

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge...

CVE-2018-8564

CVE-2018-8564 is a spoofing vulnerability affecting Microsoft Edge where improper handling of certain HTML content could mislead users into thinking they are on a legitimate site. The NVD entry assigns a CVSSv3 base score of 4.3 (MEDIUM) with network attack vector, low attack complexity, no privi...

Microsoft Windows Kernel Local Information Disclosure Vulnerability(CVE-2017-8564)

We have discovered that the handler of the 0x120007 IOCTL in nsiproxy.sys \.\Nsi device discloses portions of uninitialized pool memory to user-mode clients, likely due to output structure alignment holes. On our test Windows 7 32-bit workstation, an example layout of the output buffer is as...

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4025343)

This host is missing a critical security update according to Microsoft KB4025343 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-8564

CVE-2017-8564 is the Windows kernel information disclosure vulnerability where the kernel fails to properly initialize a memory address, potentially allowing an attacker to retrieve kernel base information and bypass KASLR. Affected products include Windows client and server families (Windows 7/8...

Microsoft Windows Kernel CVE-2017-8564 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

CVE-2016-8564

SQL injection vulnerability in Siemens Automation License Manager ALM before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410...