Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2019-4689)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4689 advisory. - tcp: enforce tcpminsndmss in tcpmtuprobing Eric Dumazet Orabug: 29886601 CVE-2019-11477 - tcp: add tcpminsndmss sysctl Eric Dumazet Orabug:...

Debian DLA-1823-1 : linux security update (SACK Panic) (SACK Slowness)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2019-3846, CVE-2019-10126 huangwen reported multiple buffer overflows in the Marvell wifi mwifiex driver, which a local user could use to cause...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support, Red Hat Enterprise Linux 7.3 Telco Extended Update Support, and Red Hat Enterprise Linux 7.3 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service

An excessive resource consumption flaw was found in the way the Linux kernel's networking subsystem processed TCP segments. If the Maximum Segment Size MSS of a TCP connection was set to low values, such as 48 bytes, it can leave as little as 8 bytes for the user data, which significantly increas...

kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service

An excessive resource consumption flaw was found in the way the Linux kernel's networking subsystem processed TCP segments. If the Maximum Segment Size MSS of a TCP connection was set to low values, such as 48 bytes, it can leave as little as 8 bytes for the user data, which significantly increas...

CVE-2019-11479

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kerne...

[ASA-201906-12] linux-hardened: denial of service

Arch Linux Security Advisory ASA-201906-12 ========================================== Severity: High Date : 2019-06-17 CVE-ID : CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 Package : linux-hardened Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-986 Summary =======...

U.S. Indicts Chinese Duo for Massive, Years-Long Spy Campaign

The Department of Justice on Thursday charged two Chinese hackers with stealing “hundreds of gigabytes” of data from more than 45 other governmental organizations and U.S.-based companies. This has potentially significant national security ramifications: Targets included the NASA Goddard Space...

APT10 Under Close Scrutiny as Potentially Linked to Chinese Ministry of State Security

Researchers claim that APT10, a likely China-based threat actor, is believed directly connected to the Chinese Ministry of State Security’s MSS Tianjin bureau. The allegations come from CrowdStrike which released a report Friday that claims it has found firm ties that link APT10 or Stone Panda wi...

CVE-2018-12925

Baseon Lantronix MSS devices do not require a password for TELNET access...

Default credentials

Baseon Lantronix MSS devices do not require a password for TELNET access...

CVE-2018-12925

Baseon Lantronix MSS devices do not require a password for TELNET access...

CVE-2018-12925

Summary: CVE-2018-12925 affects Baseon Lantronix MSS devices, where Telnet access does not require a password, enabling unauthenticated network login. This results in an attacker gaining full network access to the device, with implicit high impact on confidentiality, integrity, and availability (...

Baseon Lantronix MSS IOT/Cameras Device Servers telnet-Service NO require password authentication

Baseon Lantronix MSS IOT/Cameras Device Servers telnet-Service NO require password authentication had Exposed on the internet in ZoomEye : https://www.zoomeye.org/searchResult?q=%22prompt%20for%20assistance%22%20%2Bport:%2223%22&t=all login telnet with no password...

mss-idp.mssante.fr Open Redirect vulnerability

Open Bug Bounty ID: OBB-633805 Description| Value ---|--- Affected Website:| mss-idp.mssante.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Microsoft Windows: MSS: Time (seconds) before the screen saver grace period expires

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlscreensavergraceperiod.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: ScreenSaverGracePeriod The time in seconds before the screen saver grace period expires 0 recommended Authors: Emanuel Moss Copyright:...

Microsoft Windows: MSS: How many times unacknowledged data is retransmitted (IPv6)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmltcpmaxdataretransmissionipv6.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: TcpMaxDataRetransmissions IPv6 How many times unacknowledged data is retransmitted 3 recommended, 5 is default Authors: Emanuel Mo...

Microsoft Windows: MSS: Prevent the dial-up passsword from being saved

This test checks the setting for policy MSS: DisableSavePassword Prevent the dial-up passsword from being saved recommended OpenVAS Vulnerability Test $Id: winmldialuppasswdsaved.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: DisableSavePassword Prevent the dial-up passsword from...

Microsoft Windows: MSS: Allow ICMP redirects to override OSPF generated routes

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmlenableicmpredirect.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: EnableICMPRedirect Allow ICMP redirects to override OSPF generated routes Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networ...

Microsoft Windows: MSS: How many times unacknowledged data is retransmitted

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmltcpmaxdataretransmission.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: TcpMaxDataRetransmissions How many times unacknowledged data is retransmitted 3 recommended, 5 is default Authors: Emanuel Moss...