GSD-2022-1004172 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2022-2129)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby Docker Engine...

EulerOS Virtualization 2.9.0 : httpd (EulerOS-SA-2022-2199)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affec...

EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2022-2154)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby Docker Engine...

EulerOS Virtualization 2.9.0 : util-linux (EulerOS-SA-2022-2211)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

EulerOS 2.0 SP10 : xz (EulerOS-SA-2022-2174)

According to the versions of the xz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Communications Cloud Native Core Unified Data Repository product of Oracle Communications component: UDR GNU Gzip. The...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2148)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. CVE-2022-0696 - Use after free in utfptr2char in GitHub repository vim/vim...

EulerOS Virtualization 2.9.1 : bind (EulerOS-SA-2022-2176)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-...

CVE-2022-35291

The CVE-2022-35291 entry describes a privilege-escalation vulnerability in SAP SuccessFactors via misconfigured attachment API endpoints used by the SF Mobile app (Time Off, Time Sheet, EC Workflow, Benefits). The underlying issue is endpoint misconfiguration that allows attackers with user privi...

Eyes of Network API Insufficient Credential Protection (CVE-2020-8657)

Binary data eonapicve-2020-8657.nbin...

Stormshield Network Security 资源管理错误漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. A resource management error vulnerability exists in Stormshield Network Security. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the...

SUSE SLES12 Security Update : mozilla-nspr, mozilla-nss (SUSE-SU-2022:2536-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2536-1 advisory. - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or...

IBM QRadar Network Security Information Disclosure Vulnerability (CNVD-2022-55637)

IBM QRadar Network Security is a network security manager from IBM, USA. used to provide better visibility and control of activities and users on the network, while using deep packet inspection, heuristics and behavior-based analysis to detect and prevent advanced threats.IBM QRadar Network...

IBM QRadar Network Security Trust Management Issue Vulnerability

IBM QRadar Network Security is a network security manager from IBM, USA. used to provide better visibility and control over activities and users on the network, while using deep packet inspection, heuristics and behavior-based analysis to detect and prevent advanced threats.IBM QRadar Network...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges CVE-2022-2318. Xen Block and Networ...

CVE-2022-22212

CVE-2022-22212 – Juniper Junos OS Evolved (PFE DoS) . The issue is an Allocation of Resources Without Limits or Throttling in the Packet Forwarding Engine (PFE) that allows an unauthenticated network attacker to cause a sustained Denial of Service by driving hostbound traffic on Junos OS Evolved ...

CVE-2022-22205

CVE-2022-22205 affects Juniper Networks Junos OS on SRX Series via a memory leak in the APBR/AppQoE pathway of the PFE, causing DoS under specific traffic when APBR is enabled and no AppQoE SLA rule is configured. Affected are SRX releases: 20.3 before 20.3R3-S2; 20.4 before 20.4R3-S2; 21.1 befor...

Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.

Summary IBM QRadar Network Security has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2018-11782 DESCRIPTION: Apache Subversion svnserve servers is vulnerable to a denial of service, caused by an error in the svnserve 'get-deleted-rev' process. By sending a...

CVE-2022-21527

CVE-2022-21527 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.29 and earlier. Summary: A high-privilege attacker who can reach the server over network protocols can trigger a hang or crash (DO S) and may perform unauthorized update/insert/delete on some data. The vulnerabili...

Gimme! Gimme! Gimme! (More Data): What Security Pros Are Saying

Eight in 10 organizations collect, process, and analyze security operations data from more than 10 sources, ESG identified in a new ebook SOC Modernization and the Role of XDR, sponsored by Rapid7. Security professionals believe that the most important sources are endpoint security data 24%, thre...