Security Bulletin: Vulnerability in Java affecting Watson Knowledge Catalog for IBM Cloud Pak for Data

Summary Vulnerability in Java are affecting Watson Knowledge Catalog for IBM Cloud Pak for Data. The vulnerability has been addressed. Vulnerability Details CVEID: CVE-2020-14797 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated...

pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

apache-commons-collections jss 4.8.1-2 - Bug 1932803 - HSM + FIPS: CMCRequest with a shared secret resulting in error 4.8.1-1 - Rebase to upstream JSS v4.8.1 - Red Hat Bugilla 1908541 - jss broke SCEP - missing PasswordChallenge class - Red Hat Bugilla 1489256 - RFE jss should support RSA with OA...

VMSA-2021-0010:VMware vCenter Server updates address remote code execution and authentication vulnerabilities

Advisory ID: VMSA-2021-0010 CVSSv3 Range: 6.5-9.8 Issue Date:2021-05-25 Updated On: 2021-05-25 Initial Advisory CVEs: CVE-2021-21985, CVE-2021-21986 Synopsis: VMware vCenter Server updates address remote code execution and authentication vulnerabilities CVE-2021-21985, CVE-2021-21986 RSS Feed...

Exchange backup fails after upgrading to Veeam Backup for Microsoft 365 v5

Challenge After upgrading Veeam Backup for Microsoft 365 to v5, backup of Exchange Online data may fail with " Unauthorized 401" error. The issue affects organizations using Modern authentication and legacy protocols with application secret. Cause Starting v5 Veeam Backup for Microsoft 365 has...

Denial Of Service (DoS)

389-ds-base:sid is vulnerable to denial of service. When using a syncrepl client, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...

Azure File Sync Agent v12.1 Release – May 2021 (KB4588751)

Update for Azure File Sync agent version 12.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v12.1 Release – May 2021 (KB4588751)

Update for Azure File Sync agent version 12.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v12.1 Release – May 2021 (KB4588751)

Update for Azure File Sync agent version 12.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2021-3480

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

CVE-2021-3480

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

Null pointer dereference

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

UBUNTU-CVE-2021-3480

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

CVE-2021-3480

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

CVE-2021-3480

CVE-2021-3480 affects slapi-nis before 0.56.7. A NULL pointer dereference during Binding DN parsing can crash the 389-ds-base directory server, allowing an unauthenticated remote attacker to impact availability. Vendors/connected advisories in the provided documents confirm the DoS impact; no exp...

CVE-2021-3480

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

CVE-2021-3480

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

Denial Of Service (DoS)

chromium:sid vulnerable to denial of service. When using a syncrepl client, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash of 389-ds-base...

slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...