[SECURITY] Fedora 33 Update: community-mysql-8.0.26-1.fc33

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

FreeBSD 缓冲区错误漏洞

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. A buffer error vulnerability exists in the FreeBSD ggatec daemon, which originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect...

SUSE SLED15: krb5 / krb5-32bit / krb5-client / krb5-devel / krb5-plugin-kdb-ldap / etc (SUSE-SU-2021:2800-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2800-1 advisory. - CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge. bsc1188571 Tenable has extracted the preceding description block...

The vulnerability of NTP protocol implementations allows attackers to induce service failures.

The vulnerability of NTP synchronization protocol implementations exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure ntpd daemon failure due to an invalid value in the :config directive...

The vulnerability of the Datum Programmable Time Server (DPTS) refclock implementation of the Network Time Sync protocol allows a perpetrator to cause the ntpd daemon to fail by using the created device /dev/datum.

The vulnerability of the Datum Programmable Time Server DPTS’s refclock implementation of the Network Time Protocol NTP is related to the output of operations that exceed the buffer limits in memory. Exploiting this vulnerability could allow a attacker to cause a failure in the ntpd daemon by usi...

The vulnerability of the NTP synchronization protocol lies in its implementation, which is due to insufficient validation of input data. This allows attackers to trigger a service failure.

The vulnerability of the NTP synchronization protocol exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure ntpd daemon shutdown using a specially crafted directive “mode”...

sssd: shell command injection in sssctl

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest...

ALPINE-CVE-2021-25218

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.1...

The vulnerability of the daemon and the set of tools for managing virtualization via libvirt, which are related to pointer dereferencing errors, allow a perpetrator to trigger a service failure.

The vulnerability of the daemon and the set of tools for managing virtualization via Libvirt are related to an error in the storage pool selection based on its target path. Exploiting this vulnerability allows a remote attacker to trigger a service failure...

CVE-2021-21832

A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21832

CVE-2021-21832 affects Disc Soft Ltd Daemon Tools Pro 8.3.0.0767. Multiple connected sources describe a memory corruption vulnerability in the ISO Parsing functionality caused by an integer overflow during allocation when processing a crafted ISO file, leading to an out-of-bounds write. The TALOS...

Vulnerability Spotlight: Memory corruption vulnerability in Daemon Tools Pro

Piotr Bania of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered a memory corruption vulnerability in Disc Soft Ltd.'s Daemon Tools Pro. Daemon Tools Pro is a professional emulation software that works with disc images and virtual... This is only the...

sssd: shell command injection in sssctl

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest...

The vulnerability of the UPnP protocol implementation in the WiFi Simple Config (wscd) server from the Realtek SDK allows a hacker to execute arbitrary code.

The vulnerability of the UPnP protocol implementation in the WiFi Simple Config wscd server developed with Realtek SDK arises due to an overflow in the buffer in the “cull”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created SSDP NOTIFY messag...

Disc Soft Ltd Daemon Tools Pro ISO Parsing memory corruption vulnerability

Summary A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools Pro 8.3.0.0767. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Disc Soft...

PT-2021-14802 · Disc Soft · Daemon Tools Pro

Name of the Vulnerable Software and Affected Versions: Disc Soft Ltd Deamon Tools Pro version 8.3.0.0767 Description: A memory corruption issue exists in the ISO Parsing functionality. This can be triggered by a specially crafted malformed file, leading to an out-of-bounds write. An attacker can...

The vulnerability of the MP Daemon diagnostic tool developed by Realtek SDK allows a hacker to execute arbitrary code.

The vulnerability of the MP Daemon diagnostic tool developed by Realtek SDK relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2011-1823

The vold volume manager daemon in Android kernel trusts messages from a PFNETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor...

Vulnerability fixed in SSSD

A vulnerability has been fixed in SSSD. The vulnerability allows a local malicious person with permissions on the SSSD interface e.g., via sudo to obtain root privileges. -= Oracle =- Oracle has made updates available for Oracle Linux 8. You can install these updates using the command 'yum'. More...

CVE-2021-35394

Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote...