The vulnerability of the SEMA driver in the Intel Computing Improvement Program allows a hacker to enhance their privileges, disclose protected information, or cause service failures.

The vulnerability of the SEMA driver for data collection in the Intel Computing Improvement Program is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose protected information, or cause service failures...

The vulnerability of the microprogrammed input/output module Moxa ioLogik 2542-HSPA and the Moxa Ioxpress Configuration Utility, related to uncontrolled resource consumption, allows a intruder to cause service failures.

The vulnerability of the microprogrammed input/output module Moxa ioLogik 2542-HSPA and the Moxa Ioxpress Configuration Utility is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted packag...

The vulnerability of NVIDIA GeForce, Quadro, and Tesla software for 3D vision components allows attackers to execute arbitrary code, cause system failures, or gain enhanced privileges.

The vulnerability of 3D vision software from NVIDIA’s GeForce, Quadro, and Tesla products is related to errors in link processing. Exploiting this vulnerability can allow attackers to execute arbitrary code, cause service failures, or gain increased privileges...

The vulnerability of the libnvomx driver library for NVIDIA Tegra OpenMax allows attackers to escalate their privileges or cause service failures.

The vulnerability of the libnvomx driver library for NVIDIA Tegra OpenMax is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service failures...

The vulnerability of the RDP protocol implementation in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in processing RDP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

The vulnerability of HP Deskjet printer’s microprogramming software, related to the falsification of inter-site requests, allows a perpetrator to cause malfunctions in service or configuration of the device.

The vulnerability of HP Deskjet printer’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to cause service failures or configuration violations of the device remotely...

The vulnerability of the PAN-OS operating system, related to the operation of data out of the buffer in memory, allows attackers to cause memory corruption.

The vulnerability of the PAN-OS operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption or service failures when the current client interactive session is re-executed...

August 13, 2019—KB4512486 (Security-only update)

None None...

The vulnerability in the unified shader compiler of Intel Graphics Driver software exists due to insufficient validation of input data. This allows attackers to cause failures in the host system’s service operations.

The vulnerability in the unified shader compiler of Intel Graphics Driver software exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause failures in host systems...

The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows a attacker to cause service failures.

The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...

SUSE-SU-2019:2036-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk to version 8u222 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation bsc1141784. - CVE-2019-2762: Exceptional throw cases bsc1141782. - CVE-2019-2766: Improve file protocol handling bsc1141789. - CVE-2019-2769: Better...

Kernel update: Virtuozzo ReadyKernel patch 84.1 for Virtuozzo 7.0.11

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernel 3.10.0-957.12.2.vz7.96.21 Virtuozzo 7.0.11. Vulnerability id: PSBM-95772 pcompact operation is much slower for the containers on Virtuozzo Storage than for the ones stored locally...

The vulnerability of the Oracle Text component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Oracle Text component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures using the Oracle Net protocol stack...

The vulnerability of the Precision Time Protocol (PTP) implementation in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the Precision Time Protocol PTP implementation in the Cisco IOS operating system is related to errors in processing PTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted PTP packets...

Europe’s Galileo Satellite Outage Serves as a Warning

The dramatic EU Galileo incident underscores the threat of satellite timing and navigation system failures...

The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system, which allows a hacker to trigger a service failure.

The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system is related to deficiencies in data input control within the driver. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Jenkins Token Macro plugin relates to incorrect restrictions on XML links to external objects. This allows attackers to forge requests on the server side or trigger service failures.

The vulnerability of the Jenkins Token Macro plugin is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to forge requests on the server side or cause service failures...

The vulnerability of the software-hardware protection system VipNet Coordinator, which allows a perpetrator to trigger a service failure.

The vulnerability of the VipNet Coordinator HW software architecture related to information protection is linked to memory overflow in the hard drive. Exploiting this vulnerability allows a malicious actor to disrupt the MFTP protocol-based information exchange between all nodes of the ViPNet...

The vulnerability of the devs.c file in the Yubico libu2f-host library allows a hacker to trigger a service failure.

The vulnerability of the devs.c file in the Yubico libu2f-host library arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures due to incorrect analysis of the init respon...

Fedora 30 : fossil (2019-f350634b40)

Update to 2.8 fixes rhbz1581180 rhbz1603993 rhbz1674893 and rhbz1524335 - Removed upstreamed patch - Bug 1524335 - CVE-2017-17459 fossil: Command injection via malicious ssh URLs fedora-all - Bug 1581180 - Update fossil version to 2.6 currently is 2.2 - Bug 1603993 - fossil: FTBFS in Fedora...