The vulnerability of the blkcg_init_queue function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the blkcginitqueue function in the Linux kernel’s block/blk-cgroup.c file is due to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have other adverse effects...

The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library, which allows a hacker to cause a service failure or exert other effects.

The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library is related to buffer overflow in the stack %s in the fscanf and sscanf functions. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially craft...

Authentication flaw

On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client...

CVE-2018-5502

Summary (CVE-2018-5502) Affected product: F5 BIG-IP (LTM, etc.) with Client SSL profile handling client certificates. What’s vulnerable: BIG-IP virtual servers using a Client SSL profile that enables client certificate authentication. The vulnerability, stemming from how the system handles crafte...

CVE-2018-5502

On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client...

The vulnerability of the functions snd_seq_write and snd_seq_ioctl_set_client_pool (seq_clientmgr.c) in the Linux kernel sound subsystem allows a attacker to cause a service failure.

The vulnerability of the sndseqwrite and sndseqioctlsetclientpool functions in the Linux kernel’s audio subsystem is related to multiprogramming errors race conditions. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2017-17282

SCCP Signalling Connection Control Part module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An...

CVE-2017-17327

Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit...

CVE-2017-17169

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...

CVE-2017-17168

The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...

CVE-2017-17200

Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323...

Vulnerability in Robots Can Lead To Costly Ransomware Attacks

CANCUN, Mexico – A vulnerability in Softbank Robotics’ NAO and Pepper robots can lead to costly ransomware attacks that could cause robots deployed in businesses to stop working, curse at customers, or even perform violent movements. The vulnerability was disclosed at Kaspersky Lab’s Security...

CVE-2018-7185

The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service disruption by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association...

Tips for getting started on your security deployment

This blog is part of a series that responds to common questions we receive from customers about how to most effectively deploy Microsoft 365 Security. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. This past year, weve been...

F5 Unspecified Vulnerability in BIG-IP ASM

F5 BIG-IP ASM Application Security Manager is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. An attacker cou...

The vulnerability of the InnoDB component of the MySQL database management system allows a hacker to gain privileges for creating, deleting, or modifying data, or to cause service interruptions.

The vulnerability of the InnoDB component of the MySQL database management system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to gain privileges necessary for creating, deleting, or modifying MySQL data, or to cause service failures...

The vulnerability of the Junos operating system, related to improper code generation, allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the Junos operating system is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full control over the device by executing arbitrary commands or code on the target device. Alternatively,...

Vulnerability of the Server:Replication component of the MySQL database management system, which allows a hacker to modify, add, or delete MySQL data, or cause service interruptions.

The vulnerability of the Server:Replication component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to remotely modify, add, or delete MySQL data, or cause service failures...

Vulnerability of the Server:Partition component of the MySQL database management system, which allows attackers to gain privileges to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the Server:Partition component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileges to modify, add, or delete data, or cause service failures...

The vulnerability of the hidden content checking component in the SAP NetWeaver software integration platform allows a perpetrator to access confidential information or cause service failures.

The vulnerability of the hidden content checking component in the SAP NetWeaver software integration platform is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause servic...