CVE-2019-12677 Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability

A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition that prevents the creation of new SSL/Transport Layer Security TLS connections to an affected...

USN-4144-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the XFS file system in the Linux kernel did not properly handle mount failures in some situations. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2018-20976 Benjamin Moody discovered that the XFS file system...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

fly-admin-local-se Component Data Compromise

The vulnerability of the fly-admin-local-se component in the FLY operating system of Astra Linux is related to logging errors when changing user privileges, as well as errors in creating rules for devices with the same name. Exploiting this vulnerability can allow attackers to compromise data...

fly-admin-printer Print Manager FLY OS Privilege Escalation

The vulnerability of the fly-admin-printer print manager in the FLY operating system of Astra Linux is related to errors in processing empty tasks, as well as errors in renaming the printer. Exploiting this vulnerability allows a remote attacker to compromise data integrity, gain unauthorized...

fly-dm FLY DoS

The vulnerability of the fly-dm component in the FLY operating environment of the Astra Linux system is related to access control errors during command generation. Exploiting this vulnerability can allow an attacker to cause a service failure...

kscreen DoS

The vulnerability of the kscreen utility for supporting multiple monitors in the Astra Linux operating system is related to scaling errors when changing screen resolutions. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Astra Linux Printcontrol-Web DoS

The vulnerability of the printcontrol-web utility in the Astra Linux operating system is related to data interpretation errors during card filling. Exploiting this vulnerability can allow a perpetrator to cause service failures...

spice-gtk DoS

The vulnerability of the spice-gtk utility in the Astra Linux operating system is related to errors in the operation of USB devices when ilev-enabled is set in policykit. Exploiting this vulnerability can allow a perpetrator to cause service failures...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by opening a specially...

Windows AppX Deployment Server Privilege Escalation

The vulnerability of the Windows AppX Deployment Server component in Windows operating systems is related to errors in connection handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

Transaction Manager Unauthorized Access

The vulnerability of the Transaction Manager in Windows operating systems is related to data processing errors in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PDF Viewer Component Code Execution

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

NX-OS Endpoint Learning DoS

The vulnerability of the Endpoint Learning function in the network operating system NX-OS of Cisco Nexus series 9000 switches is related to state management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Firefox ESR Cross- Security Restriction Bypass

The vulnerability of the cross-browser system used for developing WebExtensions extensions in Firefox ESR is related to privilege assignment errors. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Rockwell Automation Stratix 8300 Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-05)

Binary data 720287.prm...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-04)

Binary data 720288.prm...

SUSE-SU-2019:2414-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new features were implemented: - jscSLE-4875: CML New device IDs for CML - jscSLE-7294: Add cpufreq driver for Raspberry Pi - fate321840: Reduce memory required to boot capture kernel while usi...

Eclipse OpenJ9 Memory Corruption

The vulnerability of the Eclipse OpenJ9 virtual machine is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker operating remotely to cause memory corruption...