CVE-2018-1085

OpenShift and Atomic Enterprise Ansible deploys a misconfigured etcd file that causes the SSL client certificate authentication to be disabled. Quotations around the values of ETCDCLIENTCERTAUTH and ETCDPEERCLIENTCERTAUTH in etcd.conf result in etcd being configured to allow remote users to conne...

kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service

In the Linux kernel through 4.14.13, the rdscmsgatomic function in 'net/rds/rdma.c' mishandles cases where page pinning fails or an invalid address is supplied by a user. This can lead to a NULL pointer dereference in rdsatomicfreeop and thus to a system panic...

atomic writer volume handling allows arbitrary file deletion in host filesystem

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H This vulnerability allows containers using a secret, configMap, projected or downwardAPI volume to trigger deletion of arbitrary files and directories on the nodes where they are running. Thanks to Joel Smith of Red Hat for reporting this problem...

January 19, 2017 – Morning Cyber Coffee Headlines – “Puppies” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 19, 2018 - Headlines The Five Laws Of Cybersecurity - Forbes 3 things y...

Linux kernel denial of service vulnerability (CNVD-2018-03215)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel. T...

UBUNTU-CVE-2017-15128

A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service BUG...

CVE-2017-15128

The CVE-2017-15128 issue affects the Linux kernel’s hugetlb_mcopy_atomic_pte function (mm/hugetlb.c) prior to version 4.13.12, where a missing size check can lead to a denial of service (BUG). Public sources in connected advisories (e.g., EulerOS/Unity Linux Nessus plugins) corroborate that vulne...

DEBIAN-CVE-2018-5333

In the Linux kernel through 4.14.13, the rdscmsgatomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rdsatomicfreeop NULL pointer dereference...

PT-2018-16901

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.14 Description The issue arises from the mishandling of page pinning failures or invalid address supplies by the rds cmsg atomic function in net/rds/rdma.c, leading to a NULL pointer dereference in rds atomi...

(RHSA-2018:0049) Important: ovirt-guest-agent-docker security and bug fix update

The ovirt-guest-agent-docker package provides the guest agent for Red Hat Linux Atomic Host virtual machines. The guest agent allows the Red Hat Virtualization Manager to receive internal guest events and retrieve information such as the IP address and the list of installed applications from the...

atomiclearning.com XSS vulnerability

Open Bug Bounty ID: OBB-457932 Description| Value ---|--- Affected Website:| atomiclearning.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

Critical severity vulnerability that affects

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

PT-2018-5775

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.12 Description: A flaw was found in the hugetlb mcopy atomic pte function in mm/hugetlb.c, which could cause a denial of service due to a lack of size check. Recommendations: For versions prior to 4.13.12,...

Design/Logic Flaw

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2015-3229

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2015-3229

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2015-3229: Undefined Security Weakness

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

PT-2017-6650 · Fedora · Fedora-Cloud-Atomic.Ks

Name of the Vulnerable Software and Affected Versions: fedora-cloud-atomic.ks in spin-kickstarts affected versions not specified Description: The issue allows remote attackers to conduct man-in-the-middle attacks by leveraging the use of HTTP to download Fedora Atomic updates. Recommendations: At...

PT-2018-5774 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: A flaw was found in the hugetlb mcopy atomic pte function in mm/hugetlb.c. This issue could trigger a local denial of service due to a superfluous implicit page unlock for VM SHARED hugetlbfs...

DEBIAN-CVE-2017-9461

smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability fdopenatomic infinite loop with high CPU usage and memory consumption due to wrongly handling dangling symlinks...