Fedora: Security Advisory for fwupd (FEDORA-2023-48c43df788)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: fwupd-1.9.6-1.fc38

fwupd is a daemon to allow session software to update device firmware...

Security Bulletin: Vulnerability in AIX affect OS Image for AIX shipped with Cloud Pak System (CVE-2022-22444)

Summary Vulnerability in AIX affect OS Image for AIX shipped with Cloud Pak System. Cloud Pak System has addressed vulnerability. Vulnerability Details CVEID:CVE-2022-22444 DESCRIPTION: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to...

[SECURITY] Fedora 37 Update: tacacs-F4.0.4.28.7fb~20231005g4fdf178-1.fc37

Tacacs+ tacplus is a C daemon that authenticates requests via the Tacacs+ Protocol and logs accounting information. This is a fork of Cisco + Shruberry's Tacacs+ daemons http://www.shrubbery.net/tacplus/...

Fedora: Security Advisory for tacacs (FEDORA-2023-ef2653f707)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2023-45198

ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd the portable version of NetBSD ftpd before 20231001 is also vulnerable...

Fedora: Security Advisory for xen (FEDORA-2023-4125279976)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: virtiofsd-1.7.0-4.fc38

Virtio-fs vhost-user device daemon Rust version...

The vulnerability of the Host KVM Daemon of the BMC – the Baseboard Management Controller – in NVIDIA DGX H100 BMC allows a hacker to execute arbitrary code, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA DGX H100 BMC’s KVM daemon controller for equipment management involves an escape from the buffer boundaries into memory. Exploiting this vulnerability allows a attacker to execute arbitrary code, cause system failures, or gain increased privileges...

CVE-2023-20202

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could exploit this...

PT-2023-5575 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Wireless LAN Controllers affected versions not specified Description: A vulnerability in the Wireless Network Control daemon wncd could allow an unauthenticated, adjacent attacker to cause a denial of service DoS...

[SECURITY] Fedora 39 Update: virtiofsd-1.7.0-4.fc39

Virtio-fs vhost-user device daemon Rust version...

Cadence Design Systems GUI Security Vulnerability

Cadence Design Systems GUI is a Graphical User Interface GUI from Cadence Design Systems, Inc. to support its suite of Electronic Design Automation EDA software tools. A security vulnerability exists in Cadence Design Systems GUI version 0.9.2 and prior versions, which stems from the use of an...

NQPTP Resource Management Error Vulnerability

NQPTP is a daemon that monitors timing data from PTP clocks on ports 319 and 320. It maintains a record of a clock, identified by its clock ID. A security vulnerability exists in NQPTP versions prior to 1.2.3, which stems from a security issue in nqptp-message-handlers.c. A carefully crafted pack...

CVE-2023-25527

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information...

Design/Logic Flaw

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information...

Design/Logic Flaw

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information...

CVE-2023-25529

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information...

CVE-2023-25527

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information...