11025 matches found
SUSE-SU-2019:3216-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-19721 fixes several issues. The following security issue was fixed: - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists bsc1153108. The following bugs were fixed: - Fixed boot up hang revealed by int3...
SUSE-SU-2019:3215-1 Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-19715 fixes several issues. The following security issues were fixed: - CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation bsc1156317. - CVE-2019-10220: Fixe...
boot-doc.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1031620 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Iran Targets Mideast Oil with ZeroCleare Wiper Malware
A freshly-discovered wiper malware dubbed “ZeroCleare” has been deployed to target the energy and industrial sectors in the Middle East. According to IBM’s X-Force Incident Response and Intelligence Services IRIS, ZeroCleare so-named because of the program database pathname of its binary file was...
LinuxCheck - Linux Information Collection Script
A small linux information collection script is mainly used for emergency response. It can be used under Debian or Centos. Features CPU TOP10, memory TOP10 CPU usage boot time Hard disk space information User information, passwd information Environmental variable detection Service list System...
Unspecified vulnerability in grub2 grub2-set-bootflag utility
runc is a CLI Command Line Interface tool for generating and running containers according to the OCI specification. A security vulnerability in the grub2-set-bootflag utility in grub2 can be exploited by a local attacker to truncate the grub2 configuration file and prevent the device from booting...
PT-2019-5305 · Gnu +2 · Grub2 +2
Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: A flaw was found in the grub2-set-bootflag utility of grub2, related to insecure privilege management. This issue can be exploited by a local attacker running the utility under resource...
Citrix Provisioning Service Target Device compatibility with Hyper V Generation 2 Virtual Machines.
The following table shows which 64-bit and 32-bit versions of Windows you can use as a guest operating system for generation 1 and generation 2 virtual machines. 64-bit versions of Windows| Generation 1| Generation 2 ---|---|--- Windows Server 2019| ✔| ✔ Windows Server 2016| ✔| ✔ Windows Server...
Ubuntu 18.04.2 VMs can fail to boot on Citrix Hypervisor (formerly XenServer)
When creating an Ubuntu 18.04.2 or18.04.3VM or updating an existing VM to Ubuntu 18.04.2 or 18.04.3, your VM can fail to boot. The console shows the boot sequence hung at the point "Starting Tool to automatically collect and submit kernel crash signatures..." If you switch the console to shell mo...
CVE-2014-5118
Trusted Boot tboot before 1.8.2 has a 'loader.c' Security Bypass Vulnerability...
CVE-2014-5118
Trusted Boot tboot before 1.8.2 has a 'loader.c' Security Bypass Vulnerability...
Security feature bypass
Trusted Boot tboot before 1.8.2 has a 'loader.c' Security Bypass Vulnerability...
CVE-2014-5118
Trusted Boot tboot before 1.8.2 has a 'loader.c' Security Bypass Vulnerability...
CVE-2014-5118
CVE-2014-5118 concerns a security bypass in Trusted Boot (tboot) prior to version 1.8.2, specifically a bypass in the loader.c component that undermines the measured boot mechanism. Multiple connected documents confirm the issue and document remediation efforts; SUSE advisories (SUSE-SU-2017:3114...
CVE-2019-19049
A memory leak in the unittestdataadd function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service memory consumption by triggering offdtunflattentree failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because...
7 Courses That Will Help You Start a Lucrative Career in Information Security
As the world becomes more interconnected by the day, more and more companies of all sizes and industries are finding themselves under attack by fearless cybercriminals who can access their entire server farms from across the globe with only a few lines of code. And it's not just private...
CVE-2019-17391
An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker with physical access to the device to read the contents of read-protected eFuses, such as flash encryption and...
edk2 security, bug fix, and enhancement update
20190308git89910a39dcfd-6.el8 - edk2-ArmVirtPkg-silence-DEBUGVERBOSE-masking-0x00400000-.patch bz1714446 - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch bz1714446 - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch bz1714446 - Resolves: bz1714446 edk2-aarch64 silen...
PT-2019-6219 · Espressif · Esp32
Name of the Vulnerable Software and Affected Versions: Espressif ESP32 mask ROM code versions 2016-06-08 0 through 2 Description: The issue is related to the lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip, allowing an attacker with physical access to the device to...
[SECURITY] Fedora 29 Update: microcode_ctl-2.1-33.fc29
The microcodectl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode...