CVE-2020-1670

CVE-2020-1670 affects Juniper Junos OS on EX4300 Series. A stream of specific IPv4 packets entering the IRB interface can cause Routing Engine high CPU load, potentially leading to network protocol operation issues and traffic interruption. The trigger is limited to IPv4 (IPv6 is not affected) an...

CVE-2020-1668 Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface

On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traffic interruption. This issue occurs when multicast packets are received by the layer 2 interface. To check if the device has high CPU load...

CVE-2020-1668

CVE-2020-1668 affects Juniper Networks Junos OS on the EX2300 Series. The issue is triggered by receipt of a stream of specific multicast packets on the layer-2 interface, causing high CPU load and potential traffic interruption. Affected versions include 18.1 before 18.1R3-S11; 18.2 before 18.2R...

NetScaler Appliance System Limits

This article contains information about various system limits for a NetScaler appliance with NetScaler software release 13.1 installed on the appliance. LSN Entities and Bindings Base System Limits Base Networking Limits Load Balancing and Monitoring Limits Advanced Policy/Expression Limits Rewri...

The vulnerability of the SDL_LoadWAV_RW function in the Simple DirectMedia Layer library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SDLLoadWAVRW function audio/SDLwave.c. in the Simple DirectMediaLayer library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Akamai Drives New Standards and Enhances Authoritative DNS and Load Balancing Services

For more than 20 years, Akamai's customers have trusted our global edge platform to deliver their content, secure their web applications, and accelerate end-user experiences. As the basis for our mapping functions, Akamai DNS has always been essential to the reliability and performance of our...

Measuring & Improving Core Web Vitals

Google recently announced a proposed update to its search ranking algorithm: the Page Experience Update. This change, which launches in 2021, includes more performance signals in the ranking algorithm. A subtle but important feature of the update is that AMP will no longer be a requirement for...

Product release: Virtuozzo Hybrid Infrastructure 3.5 Update 5.1 (3.5.5-41)

This update provides bug fixes and improvements. Vulnerability id: VSTOR-36967 Optimize the schedule of periodic tasks to minimize the number of false-positive "Node is offline" alerts. Vulnerability id: VSTOR-35658 Under certain circumstances, load balancers may fail to create...

Arbitrary Code Execution

shiba is vulnerable to arbitrary code execution. The vulnerability exists through the use of the unsafe function load in js-yaml...

CVE-2020-7738

All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load of the package js-yaml instead of its secure replacement , safeLoad...

CVE-2020-7738

CVE-2020-7738 affects the shiba package. The root cause is the use of js-yaml.load() instead of the secure js-yaml.safeLoad(), enabling Arbitrary Code Execution. Affected: all shiba versions; impact: arbitrary code execution; remediation: Snyk notes no fixed shiba version yet. References include ...

kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c

A flaw was found in the Linux kernel’s implementation of dropping sysctl entries. A local attacker who has access to load modules on the system can trigger a condition during module load failure and panic the system...

kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c

A flaw was found in the Linux kernel’s implementation of dropping sysctl entries. A local attacker who has access to load modules on the system can trigger a condition during module load failure and panic the system...

EulerOS Virtualization for ARM 64 3.0.6.0 : perl-Module-Load-Conditional (EulerOS-SA-2020-2013)

According to the version of the perl-Module-Load-Conditional package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was found that perl can load modules from the current directory if not found in the module...

EulerOS Virtualization for ARM 64 3.0.6.0 : perl-Sys-Syslog (EulerOS-SA-2020-2039)

According to the version of the perl-Sys-Syslog package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was found that perl can load modules from the current directory if not found in the module directories, via th...

Huawei EulerOS: Security Advisory for perl-Module-Load-Conditional (EulerOS-SA-2020-2013)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : perl-JSON-PP (EulerOS-SA-2020-2053)

According to the version of the perl-JSON-PP package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was found that perl can load modules from the current directory if not found in the module directories, via the...

Updated pdns packages fix security vulnerability

An issue has been found in PowerDNS Authoritative Server allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while...

MGASA-2020-0375 Updated pdns packages fix security vulnerability

An issue has been found in PowerDNS Authoritative Server allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while...

NGINX before 1.17.7 with certain error_page configurations allows HTTP request smuggling as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

...