Photon OS 3.0: Subversion PHSA-2019-3.0-0035

An update of the subversion package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130104;...

Photon OS 3.0: Openjdk8 PHSA-2019-3.0-0035

An update of the openjdk8 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0035. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130102;...

ABB Relion 670 Series CVE-2019-18253 Directory Traversal Vulnerability

Description ABB Relion 670 Series is prone to a directory-traversal vulnerability. Remote attackers may use a specially crafted request with directory-traversal sequences '../' to retrieve sensitive information. This may aid in further attacks. The following ABB products are affected: Relion 670...

Photon OS 3.0: Linux PHSA-2019-3.0-0034

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0034. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid130120;...

Ubuntu 19.10 : Linux kernel vulnerability (USN-4161-1)

It was discovered that the IPv6 routing implementation in the Linux kernel contained a reference counting error leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. Note that Tenable Network Securi...

Debian DLA-1967-1 : libpcap security update

libpcap Packet CAPture, a low-level network monitoring library, does not properly validate the PHB header length before allocating memory. This update added sanity checks for PHB header length. For Debian 8 'Jessie', this problem has been fixed in version 1.6.2-2+deb8u1. We recommend that you...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2710-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2017-18595: A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c bnc1149555. CVE-2019-14821: An out-of-bounds acce...

Debian DLA-1966-1 : aspell security update

It was discovered that Aspell, the GNU spell checker, incorrectly handled certain inputs which leads to a stack-based buffer over-read. An attacker could potentially access sensitive information. For Debian 8 'Jessie', this problem has been fixed in version 0.60.720110707-1.3+deb8u1. We recommend...

Adopting a Risk-Based Approach to Cybersecurity in the Financial Services Industry

Today’s financial organizations face many different risks in volatile and uncertain business environments, but the ever-present threat of cyberattacks and data breaches is now impossible to ignore. For this reason, managing these cyber-risks now has to simply be considered one of the many costs o...

CVE-2019-17367

CVE-2019-17367 is a CSRF vulnerability in OpenWrt LuCI affecting OpenWrt 18.06.0–18.06.4. A logic flaw in LuCI’s HTTP routing led to ineffective CSRF token testing for endpoints (including arcombine()-based dispatch) under /cgi-bin/luci/admin/network/. This permits a malicious site to cause unint...

Adding a Hardware Backdoor to a Networked Computer

Interesting proof of concept: At the CS3sthlm security conference later this month, security researcher Monta Elkins will show how he created a proof-of-concept version of that hardware hack in his basement. He intends to demonstrate just how easily spies, criminals, or saboteurs with even minima...

Fedora 30 : python-ecdsa (2019-5297458c78)

Update to 0.13.3 - CVE-2019-14853 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

CVE-2019-2990

CVE-2019-2990 is an Oracle E-Business Suite iStore vulnerability in the Order Tracker component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. An unauthenticated attacker with network access over HTTP can compromise iStore, with human interaction required for exploit delivery, potentiall...

CVE-2019-2907

CVE-2019-2907 affects Oracle Fusion Middleware Web Services (SOAP with Attachments API for Java) with version 12.2.1.3.0. A remote, unauthenticated attacker can exploit over HTTP to write or delete data and read data via Oracle Web Services. Root cause and exact exploit details are not expanded b...

CVE-2019-2888

CVE-2019-2888 — Oracle WebLogic Server (EJB Container) Affected product/versions: Oracle WebLogic Server (Oracle Fusion Middleware), specifically EJB Container in versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause/impact: An unauthenticated, network-accessible attacker can exploit via HT...

CVE-2019-6472

CVE-2019-6472 concerns the Kea DHCPv6 server. A packet containing a malformed DUID can cause the kea-dhcp6 process to exit due to an assertion failure. Affected versions are 1.4.0–1.5.0 and 1.6.0-beta1/beta2. The issue is a server termination condition; no exploit details are provided in the sour...

Cisco Identity Services Engine CVE-2019-15281 HTML Injection Vulnerability

Description Cisco Identity Services Engine is prone to an HTML-injection vulnerability because it fails to properly validate user-supplied input. Successful exploits will result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application,...

SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2019:2674-1)

This update for tcpdump fixes the following issues : CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716 bsc1153098. CVE-2018-10103: Fixed a mishandling of the printing of SMB data bsc1153098. CVE-2018-10105: Fixed a mishandling of the printing of SMB...

The vulnerability of the NSS library used by Thunderbird email client and browsers Firefox and Firefox ESR allows a malicious actor to gain unauthorized access to information.

The vulnerability of the NSS library for Thunderbird email clients, as well as browsers Firefox and Firefox ESR, relates to reading beyond the buffer during the import of the closed curve25519 key in the PKCS 8 format with leading bytes of 0x00. Exploiting this vulnerability can allow an attacker...