211 matches found
aide: heap-based buffer overflow on outputs larger than B64_BUF
A heap-based buffer overflow vulnerability in the base64 functions of AIDE, an advanced intrusion detection system. An attacker could crash the program and possibly execute arbitrary code through large 16k extended file attributes or ACL...
SUSE SLES12 Security Update : samba (SUSE-SU-2022:0323-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0323-1 advisory. - Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux...
Ubuntu 16.04 ESM : Samba vulnerability (USN-5260-3)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5260-3 advisory. USN-5260-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...
SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2022:0287-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0287-1 advisory. - CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfsfruit module. bsc1194859 Tenable has extracted the preceding description block...
Ubuntu 18.04 LTS : Samba vulnerability (USN-5260-2)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5260-2 advisory. Orange Tsai discovered that the Samba vfsfruit module incorrectly handled certain memory operations. A remote attacker could use this issue to cause Samba to cras...
CVE-2021-44142
The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...
Samba vfs_fruit module insecurely handles extended file attributes
Overview The Samba vfsfruit module allows out-of-bounds heap read and write via extended file attributes CVE-2021-44142. This vulnerability allows a remote attacker to execute arbitrary code with root privileges. Description The Samba vfsfruit module uses extended file attributes EA, xattr to...
CVE-2021-31566
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. ...
Servicing stack update for Windows 10, version 2004 and 20H2: January 12, 2021
None None...
Servicing stack update for Windows 10, version 2004 and 20H2: November 10, 2020
None None...
KB2793634 - Windows Installer starts repeatedly after you install SQL Server 2012 SP1
KB2793634 - Windows Installer starts repeatedly after you install SQL Server 2012 SP1 Symptoms After you install SQL Server 2012 SP1 on a computer, the Windows Installer Msiexec.exe process is repeatedly started to repair certain assemblies. Additionally, the following events are logged in the...
DST correction in Windows for the Fiji Islands: October 13, 2020
None None...
Servicing stack update for Windows 10, version 1903 and 1909: September 8, 2020
None None...
Servicing stack update for Windows 10, version 1809: September 8, 2020
None None...
Servicing stack update for Windows 10, version 2004: September 8, 2020
None None...
Servicing stack update for Windows 10, version 1607: July 14, 2020
None None...
Servicing stack update for Windows 10: July 14, 2020
None None...
Servicing stack update for Windows Server 2008 SP2: July 14, 2020
Servicing stack update for Windows Server 2008 SP2: July 14, 2020 Applies to Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Server Core installation Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for...