6828 matches found
SUSE SLED15 / SLES15 Security Update : cloud-init (SUSE-SU-2020:0751-1)
This update for cloud-init fixes the following security issues : CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936. Note that Tenable Network Security has...
SUSE-SU-2020:0751-1 Security update for cloud-init
This update for cloud-init fixes the following security issues: - CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. - CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2020-1286)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux: SINGLE in /etc/sysconfig/init
The single-user mode enters with root access. If you do not set password-protect, there will be serious security risks. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
EulerOS 2.0 SP8 : cloud-init (EulerOS-SA-2020-1286)
According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because...
EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2020-1304)
According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In cloud-init through 19.4, randuserpassword in cloudinit/config/ccsetpasswords.py has a small default pwlen value, which makes it easier for...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...
Linux: Read /etc/audit/audit.rules (KB)
audit.rules is a file containing audit rules that will be loaded by the audit daemons init script whenever the daemon is started. The auditctl program is used by the initscripts to perform this operation. The syntax for the rules is essentially the same as when typing in an auditctl command at a...
Timeshift Code Execution Vulnerability
Timeshift is a Linux system restore tool. The product supports the creation of file system snapshots and provides features such as snapshot recovery. A security vulnerability exists in Timeshift versions prior to 20.03, which stems from the 'inittmp' function of the TeeJee.FileSystem.vala file...
UBUNTU-CVE-2019-20503
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
PT-2020-2071
Name of the Vulnerable Software and Affected Versions usrsctp versions prior to 2019-12-20 Description The issue is related to out-of-bounds reads in the sctp load addresses from init function of the usrsctp implementation. This can potentially allow a remote attacker to cause a denial of service...
SUSE SLED15 / SLES15 Security Update : cloud-init (SUSE-SU-2020:0585-1)
This update for cloud-init fixes the following security issues : CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936. Note that Tenable Network Security has...
wildfly: Race condition on PID file allows for termination of arbitrary processes by local users
A flaw was discovered in wildfly that would allow local users, who are able to execute init.d script, to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root...
SUSE-SU-2020:0585-1 Security update for cloud-init
This update for cloud-init fixes the following security issues: - CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. - CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936...
