The vulnerability of the microprogrammed logic controllers from Modicon, related to access control errors, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the programmable logic controller Modicon’s microprogramming software is related to access control errors. Exploiting this vulnerability could allow an intruder to cause service failures or execute arbitrary code by modifying the controller’s configuration using the Modbus...

The vulnerability of the microprogrammed logic controller Modicon’s software, related to insufficient checking of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.

Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks are related to request processing errors. Exploiting these vulnerabilities allows attackers to remotely cause service failures by sending specially crafted requests...

The vulnerability of the ASP.NET Core software platform, related to errors in request processing, allows a hacker to cause a service failure.

The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests to the ASP.NET Core application...

SUSE SLES12 Security Update : bind (SUSE-SU-2019:1449-1)

This update for bind fixes the following issues : Security issues fixed : CVE-2018-5740: Fixed a denial of service vulnerability in the 'deny-answer-aliases' feature bsc1104129. CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zon...

Citrix SDWAN : Staging failing for all sites

All connected sites are going into failed state under change management after staging is initiated on the MCN : Also not able to download the staged package for any site using the Staged link in change management, as highlighted above...

The vulnerability of the EAP Server component of the EAP-PWD certification protocol for wireless communication devices with WPA encryption lies in the improper use of privileges, allowing attackers to compromise data integrity and confidentiality or cause service failures.

The vulnerability of the EAP Server component of the EAP-PWD protocol for wireless communication devices certified by WPA is related to the lack of explicit checks on imported elements. These imported elements do not undergo verification of scalar values and values of elements in the...

The vulnerability of the strncpy function in Atftpd arises from the possibility of the operation exceeding the buffer’s memory limit. This allows attackers to compromise data integrity and confidentiality, or cause service failures.

The vulnerability of the strncpy function in the Atftpd package is related to the sending of a 3-byte error message by the package. Exploiting this vulnerability allows an attacker to compromise data integrity and confidentiality, or cause service failures...

openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-1499)

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues : Security issues fixed : - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic C...

OPENSUSE-SU-2019:1506-1 Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic CPU...

The vulnerability of the Heimdal protocol’s Kerberos implementation in the Samba network communication software allows attackers to expose sensitive information or cause service failures.

The vulnerability of the Heimdal protocol’s Kerberos 5 implementation in the Samba network communication software package is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected informatio...

The vulnerability of Siemens’ software products lies in insufficient validation of input data, which allows a perpetrator to trigger service failures.

The vulnerability of Siemens’ software products is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures when responding to PROFINET DCP requests with specially crafted packets...

Vulnerability of .NET Core and Microsoft .NET Framework software platforms, related to errors in regular expression processing, allowing attackers to trigger service failures.

The vulnerability of.NET Core and Microsoft.NET Framework software lies in errors that occur during the processing of regular expressions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of SINAMICS PERFECT HARMONY GH180 software drivers, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker with access to the device over the network to cause service failures...

UBUNTU-CVE-2019-12380

DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. physefisetvirtualaddressmap in arch/x86/platform/efi/efi.c and eficallphysprolog in arch/x86/platform/efi/efi64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because...

DEBIAN-CVE-2019-12380

DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. physefisetvirtualaddressmap in arch/x86/platform/efi/efi.c and eficallphysprolog in arch/x86/platform/efi/efi64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because...

CVE-2019-12380

CVE-2019-12380 is documented in multiple advisories referencing the Linux kernel EFI handling code. The connected sources specify that the vulnerability arises from how the EFI subsystem handles memory allocation failures in the x86 EFI path: phys_efi_set_virtual_address_map in arch/x86/platform/...

The vulnerability of Intel Broadwell processors stems from insufficient validation of input data, allowing attackers to exploit their privileges, cause system failures, or compromise the confidentiality of protected information.

The vulnerability of Intel Broadwell processors exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or compromise the confidentiality of protected information...

The vulnerability of Juniper Identity Management Service’s internal resource protection mechanism lies in insufficient validation of input data. This allows attackers to bypass SRX’s firewall policies or trigger service failures.

The vulnerability of Juniper Identity Management Service’s internal resource protection mechanism exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to bypass SRX’s firewall policies or cause service failures...

The vulnerability of the Spring Framework software platform, which arises due to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Spring Framework software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...