5219 matches found
CVE-2019-12448
CVE-2019-12448 affects GNOME gvfs 1.29.4–1.41.2 in gvfsbackendadmin.c, which has race conditions because the admin backend doesn’t implement query_info_on_read/write. Connected Nessus entries (e.g., TDs from TencentOS/Tenable) list this CVE among gvfs-related issues and confirm the affected range...
EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1588)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma fla...
CVE-2019-6819
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when specific Modbus frames are sent to the controller in the products: Modicon M340 - firmware versions prior to V3.01, Modicon M580 - firmware versions prior to...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:1407-1 Rating: important References: 1012382 1020645 1020989 1031492 1047487 1051510 1053043 1062056 1063638 1064388 1066223 1070872 1085539 1087092 1094244 1096480 1096728 1097104 1100132 1103186...
Security update for the Linux Kernel (important)
openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2019:1404-1 Rating: important References: 1050549 1051510 1052904 1053043 1055117 1055121 1055186 1061840 1063638 1065600 1065729 1070872 1082555 1083647 1085535 1085536 1088804 1097583 1097584 1097585...
Updated kernel packages fixes security vulnerabilities
This kernel update is based on the upstream 4.14.116 and fixes at least the following security issues: A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the...
MGASA-2019-0170 Updated kernel packages fixes security vulnerabilities
This kernel update is based on the upstream 4.14.116 and fixes at least the following security issues: A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the...
ImageMagick < 7.0.7-28 Denial of service vulnerability
The version of ImageMagick installed on the remote Windows host is 7.x prior to 7.0.7-28. It is, therefore, affected by a denial of service vulnerability in the formatIPTCfrom Buffer function due to failure to handle exceptional conditions. An unauthenticated, local attacker can exploit this to...
Schneider Electric Modicon Multiple Controllers Unusual or Exceptional Conditions Improper Check
Binary data 720250.prm...
Schweitzer Engineering Laboratories Real-Time Automation Controller (RTAC) PLC Detection
Binary data 755330.prm...
High-Severity Bug Leaves Cisco TelePresence Gear Open to Attack
Cisco Systems has patched two high-severity vulnerabilities that can be exploited by remote unauthenticated adversaries to launch denial of service attacks. Impacted are Cisco’s TelePresence Video Communication Server and the company’s ASA 5500-X Series Firewalls. The vulnerability with the wides...
CVE-2019-1703
A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense FTD Software for the Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition...
Timing Attack
Red Hat Enterprise Linux is vulnerable to timing attacks. A remote attacker could possibly use this flaw to retrieve directory server password after many tries which leads to disclosure of information and race conditions...
Symlink Attack
ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. It was found that ABRT was vulnerable to multiple race condition...
Denial Of Service (DoS)
kernel-rt is vulnerable to denial of service. A local user is able to crash the system via vectors involving munmap and close system call due to multiple race conditions in the function madviseremove in mm/madvise.c...
CVE-2019-11599
The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by...
SUSE SLES11 Security Update : openssh (SUSE-SU-2019:14030-1)
This update for openssh fixes the following issues : Security vulnerabilities addressed : CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers bsc1121816. CVE-2019-611...
How Credit Unions Can Optimize & Secure the Mobile App Experience
A small army of digital natives are about to become the largest generation globally. Gen Z, those born after 1996, will account for 32% of the world's population 7.7 billion in 2019 and outnumber millennials for the first time, according to World Economic Forum. This year, it will be critical for...
SUSE-SU-2019:14030-1 Security update for openssh
This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers bsc1121816. -...