[SECURITY] [DSA 4187-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4187-1 [email protected] https://www.debian.org/security/ Ben Hutchings May 01, 2018 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4187-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : kernel (CESA-2018:1062)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Denial Of Service (DoS) Through Memory Leaks

libFLAC.so is vulnerable to denial of service DoS attacks. The attacks are possible due to an error in the readmetadatavorbiscomment function of src/libFLAC/streamdecoder.c...

Western Digital My Cloud EX2 NAS Device Leaks Files

UPDATE Western Digital’s My Cloud EX2 storage devices leak files to anyone on a local network by default, no matter the permissions set by users. If configured for remote access via the public internet, the My Cloud EX2 also leaks files via an HTTP request on port 9000, according to researchers a...

CVE-2018-10205

hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the containersetupmodules and hyperrescanscsi functions in container.c, related to runV 1.0.0 for Docker...

CVE-2018-10205

hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the containersetupmodules and hyperrescanscsi functions in container.c, related to runV 1.0.0 for Docker...

Design/Logic Flaw

hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the containersetupmodules and hyperrescanscsi functions in container.c, related to runV 1.0.0 for Docker...

CVE-2018-10205

hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the containersetupmodules and hyperrescanscsi functions in container.c, related to runV 1.0.0 for Docker...

CVE-2018-10205

Affected product/component: HyperHQ Hyper’s hyperstart 1.0.0; vulnerable code paths are in container_setup_modules and hyper_rescan_scsi within container.c, related to runV 1.0.0 for Docker. Root cause / vulnerability type: memory leaks leading to memory exhaustion (as described in CVE records). ...

SUSE-SU-2018:0981-1 Security update for wireshark

This update for wireshark fixes the following issues: - Update to wireshark 2.2.14, fix such issues: bsc1088200 VUL-0: wireshark: multiple vulnerabilities fixed in 2.2.14, 2.4.6 CVE-2018-9256: LWAPP dissector crash CVE-2018-9260: IEEE 802.15.4 dissector crash CVE-2018-9261: NBAP dissector crash...

RHEL 7 : kernel-alt (RHSA-2018:0654)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0654 advisory. The kernel-alt packages provide the Linux kernel version 4.x. The following packages have been upgraded to a later upstream version:...

openSUSE Security Update : wireshark (openSUSE-2018-347)

This update for wireshark fixes the following issues : Minor vulnerabilities that could be used to trigger dissector crashes or cause dissectors to go into large infinite loops by making Wireshark read specially crafted packages from the network or capture files boo1088200 : - CVE-2018-9264: ADB...

Debian: Security Advisory (DLA-1300-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

A week in security (March 12 – March 18)

Last week on Malwarebytes Labs, we took a look at the inner workings of a fileless attack, explored what happened in a zero day ransomware attack aimed at South Koreans, gave you hints and tips for avoiding cold calls, and took a deep dive into the secretive world of GrayKey. Other news The Equif...

SpiderFoot 2.12 - Automates OSINT to find out everything possible about your target

SpiderFoot is a reconnaissance tool that automatically queries over 100 public data sources OSINT to gather intelligence on IP addresses, domain names, e-mail addresses, names and more. You simply specify the target you want to investigate, pick which modules to enable and then SpiderFoot will...

SUSE SLES11 Security Update : xen (SUSE-SU-2018:0638-1) (Meltdown) (Spectre)

This update for xen fixes several issues. This new feature was included : - add script and sysv service to watch for vcpu online/offline events in a HVM domU These security issues were fixed : - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative...

Various resources included the current remote directory password in their responses - CVE-2016-10740

Various resources in Atlassian Crowd before before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories via examining the responses of various resources...

Denial Of Service (DoS)

zziplib is vulnerable to denial of service DoS attacks. These attacks are possible because the zzipmemdisknew can be used by attackers to trigger memory leaks...

[SECURITY] [DLA 1300-1] xen security update

Package : xen Version : 4.1.6.lts1-13 CVE ID : CVE-2018-7540 CVE-2018-7541 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation. For Debian 7 "Wheezy", these problems have been fixed in version...