SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2021:0352-1)

This update for java-11-openjdk fixes the following issues : java-11-openjdk was upgraded to include January 2021 CPU bsc1181239 Enable Sheandoah GC for x8664 jscECO-3171 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

CVE-2021-26676

ConnMan gdhcp flaw (CVE-2021-26676) causes a stack information leak via an uninitialized variable in the gdhcp component, affecting ConnMan versions prior to 1.39. Network-adjacent attackers could leverage the leak to facilitate further exploitation related to bugs in gdhcp. Public advisories (Op...

CVE-2021-26675

CVE-2021-26675 affects ConnMan’s DNS proxy (dnsproxy) prior to version 1.39. It is a stack-based buffer overflow that could allow a network-adjacent attacker to execute arbitrary code, as described across multiple sources (Arch Linux ASA, openSUSE update, Debian DSA/DLA, Gentoo GLSA). The issue i...

CVE-2020-24685

CVE-2020-24685 affects ABB AC500 V2 with onboard Ethernet versions 2.8.4 and earlier. An unauthenticated, specially crafted network packet can cause a denial-of-service by stopping the PLC; after stop, physical access is required to restart the application. Public documents describe the vulnerabi...

Siemens SCALANCE W780 and W740

1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SCALANCE W780 and W740 Vulnerability: Allocation of Resources Without Limits or Throttling 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network allows a hacker to elevate their privileges to the root level.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

Email Relaying. A how-to and a reminder

On a recent internal infrastructure test I came across a server that had port 25/TCP open. This is normally the Simple Mail Transfer Protocol SMTP service, and sure enough a quick look confirmed it. Now, such services on an internal network are not unusual. System and network administrators...

EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1250)

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resultin...

EulerOS 2.0 SP9 : bind (EulerOS-SA-2021-1261)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In ISC BIND9 versions BIND 9.11.14 - 9.11.19, BIND 9.14.9 - 9.14.12, BIND 9.16.0 - 9.16.3, BIND Supported Preview Edition 9.11.14-S1 - 9.11.19-S1:...

Debian DLA-2543-1 : libdatetime-timezone-perl new upstream version

This update includes the changes in tzdata 2021a for the Perl bindings. For the list of changes, see DLA-2542-1. For Debian 9 stretch, this problem has been fixed in version 1:2.09-1+2021a. We recommend that you upgrade your libdatetime-time zone-perl packages. For the detailed security status of...

EulerOS 2.0 SP5 : nss (EulerOS-SA-2021-1218)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a...

EulerOS 2.0 SP5 : mysql-connector-java (EulerOS-SA-2021-1215)

According to the version of the mysql-connector-java package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - MySQL Connector/J is a native Java driver that converts JDBC Java Database Connectivity calls into the network protocol used by the...

EulerOS 2.0 SP5 : openjpeg (EulerOS-SA-2021-1220)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability...

EulerOS 2.0 SP5 : sox (EulerOS-SA-2021-1231)

According to the versions of the sox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - SoX Sound eXchange is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound...

CVE-2021-25755

Affected software : JetBrains Code With Me (plugin for IntelliJ IDE). Issue : cryptographic/traffic protection vulnerability where an attacker on the local network, knowing a session ID, could access encrypted traffic. Root cause / details : multiple sources (NVD, Red Hat, CNVD, CVE records) cons...

Huawei EulerOS: Security Advisory for nss-softokn (EulerOS-SA-2021-1155)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : openvswitch (SUSE-SU-2021:0258-1)

This update for openvswitch fixes the following issues : openvswitch was updated to 2.13.2 CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

Design/Logic Flaw

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface...

Weak Password Vulnerability in Renzi's Network Security Management System

hereinafter referred to as Renzihang was founded in May 2000, and is committed to escorting the network information security of state management organizations, operators, enterprises and institutions, and individuals. A weak password vulnerability exists in Renzihan's network security management...

EulerOS 2.0 SP8 : php (EulerOS-SA-2021-1163)

According to the version of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - FILTERVALIDATEURL accepts URLs with invalid userinfoCVE-2020-7071 Note that Tenable Network Security has extracted the preceding description block...