Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities

Summary IBM QRadar Network Security has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000004 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a race condition in the sound system. A remote attacker could exploit this vulnerability to caus...

Security Bulletin: IBM QRadar Network Security is affected by procps-ng procps vulnerabilities

Summary IBM QRadar Network Security has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2018-1126 DESCRIPTION: procps-ng procps is vulnerable to a buffer overflow, caused by improper bounds checking. By sending a specially-crafted request, a remote attacker could overflo...

Security Bulletin: IBM QRadar Network Security has released fixpack in response to the vulnerabilities known as Spectre and Meltdown

Summary IBM has released the following fixpack for IBM QRadar Network Security in response to CVE-2017-5753, CVE-2017-5715 and CVE-2017-5754. Vulnerability Details CVEID: CVE-2017-5753 CVEID: CVE-2017-5754 CVEID: CVE-2017-5715 Affected Products and Versions IBM QRadar Network Security 5.4.0...

Security Bulletin: IBM QRadar Network Security is affected by an OpenSSH vulnerability

Summary IBM QRadar Network Security has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2017-15906 DESCRIPTION: OpenSSH is vulnerable to a denial of service, caused by an error in the processopen function when in read-only mode. A remote authenticated attacker could exploi...

Security Bulletin: IBM QRadar Network Security is affected by a GNU Compiler Collection (GCC) vulnerability

Summary IBM QRadar Network Security has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2017-11671 DESCRIPTION: GNU Compiler Collection GCC could provide weaker than expected security, caused by a flaw in the ix86expandbuiltin function in i386.c. A remote attacker could...

Security Bulletin: IBM QRadar Network Security is affected by GNU C library (glibc) vulnerabilities

Summary IBM QRadar Network Security has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000001 DESCRIPTION: Glibc could allow a local attacker to execute arbitrary code on the system, caused by a buffer underflow in the realpath function in stdlib/canonicalize.c. A...

Debian DLA-1442-2 : mailman regression update

The security update of mailman announced as DLA-1442-1 introduced a regression due to an incomplete fix for CVE-2018-13796 that broke the admin and listinfo overview pages. For Debian 8 'Jessie', this problem has been fixed in version 1:2.1.18-2+deb8u4. We recommend that you upgrade your mailman...

Be like a Moomin: How to establish trust between competitors so we can fight cybercrime

Do you know the Moomins? They're a tight-knit, happy, collaborative cartoon family. I'd never heard of them until I was lucky enough to spend a few days at the Microsoft offices in Helsinki, Finland. The Moomin keychain in the photo was a gift from the Finnish CISO. As I did a little research int...

WordPress < 4.9.7 Arbitrary File Deletion Vulnerability

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.9.7. It is, therefore, affected by an arbitrary file deletion vulnerability that can lead to remote code execution. C Tenable Network Security, Inc. include'compat.inc'; if...

Photon OS 2.0 : libtasn1 / libtiff / dnsmasq (PhotonOS-PHSA-2018-2.0-0017) (deprecated)

An update of 'libtasn1', 'libtiff', 'dnsmasq' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0017. The text itself is...

Photon OS 1.0 : gcc / nghttp2 (PhotonOS-PHSA-2018-1.0-0150 (deprecated)

An update of 'gcc', 'nghttp2' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0150. The text itself is copyright C VMware,...

SUSE SLED12 / SLES12 Security Update : rsyslog (SUSE-SU-2018:2038-1)

This update for rsyslog fixes the following issues: The following security vulnerability was addressed : - CVE-2015-3243: Make sure that log files are not created world-readable bsc935393 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

Fedora 27 : wordpress (2018-8fc2cb8cb0)

Update to 4.9.7 security release. https://wordpress.org/news/2018/07/wordpress-4-9-7-security-and-mainte nance-release/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Fedora 27 : singularity (2018-abe4d2383e)

This is a straightforward update from 2.5.1 to the newly-released 2.5.2. Release notes are here : https://github.com/singularityware/singularity/releases/tag/2.5.2 The most important fix is a security issue in the overlay code. Please look for regressions in your Singularity runtime workflows. No...

SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2018:2040-1)

This update for python fixes the following issues: The following security vulnerabilities were addressed : - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Cisco Adaptive Security Appliance Path Traversal

require 'msf/core' class MetasploitModule "Cisco Adaptive Security Appliance - Path Traversal", 'Description' = %q Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without...

Debian DLA-1436-1 : gosa security update

Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program. For Debian 8 'Jessie', this problem has been fixed in version 2.7.4+reloaded2-1+deb8u3. We recommend that you upgrade your gosa packages. NOTE: Tenable...

Debian DLA-1435-1 : dnsmasq regression update

The dns-root-data update to 2017072601deb8u2 broke dnsmasq's init script, making dnsmasq no longer start when dns-root-data was installed. This update fixes dnsmasq's parsing of dns-root-data. For Debian 8 'Jessie', this problem has been fixed in version 2.72-3+deb8u3. We recommend that you upgra...

Debian DLA-1430-1 : taglib security update

CVE-2018-11439 Fix for a heap-based buffer over-read via a crafted audio file. For Debian 8 'Jessie', these problems have been fixed in version 1.9.1-2.1+deb8u1. We recommend that you upgrade your taglib packages. NOTE: Tenable Network Security has extracted the preceding description block direct...

Debian DLA-1424-1 : linux-latest-4.9 new package

Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a supported upgrade path for systems that currently use kernel packages from the 'jessie-backports' suite. However, 'apt full-upgrade' will not automatically install the updated kernel packages. You should explicitly install one...