Securing a travel iPhone

These are dry notes I took in the process of setting up a burner iPhone SE as a secure travel device. They are roughly in setup order. I believe iOS to be the most secure platform one can use at this time, but there are a lot of switches and knobs. This list optimizes for security versus...

Debian DLA-540-1 : qemu security update

Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this flaw to execute arbitrary code on the host with the...

The vulnerability in the libraries of Network Security Services and the Firefox browser allows a perpetrator to cause a service failure or exert other effects.

The vulnerability of the Network Security Services library and the Firefox browser is related to code errors. Exploiting this vulnerability can allow a malicious actor to cause service failures memory corruption, application termination or other adverse effects...

CVE-2016-2861

Summary (CVE-2016-2861) : IBM WebSphere eXtreme Scale Client components (WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, 8.6 before 8.6.0.8)** expose sensitive information due to weaker-than-expected encryption, enabling a remote attacker to decrypt network...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-3018-2)

USN-3018-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not...

Cisco IOS Zone-Based Firewall Feature Security Bypass (CSCun94946)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a security bypass vulnerability in the Zone-Based Firewall feature due to insufficient zone checking for traffic belonging to existing sessions. An unauthenticated, remote attacker can explo...

Cisco IOS-XE Zone-Based Firewall Feature Security Bypass (CSCun96847)

According to its self-reported version, the Cisco IOS-XE software running on the remote device is affected by a security bypass vulnerability in the Zone-Based Firewall feature due to insufficient zone checking for traffic belonging to existing sessions. An unauthenticated, remote attacker can...

Debian DLA-528-1 : libcommons-fileupload-java security update

A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer 4096 bytes used to read the uploaded file. This caused the file upload process to take several orders of magnitude longer than if th...

CVE-2016-4824

The CVE-2016-4824 issue affects Corega CG-WLR300GNV and CG-WLR300GNV-W wireless routers. The WPS PIN authentication implementation does not limit the number of attempts, enabling authenticated brute-force attempts from within wireless range to recover the PIN and gain network access. Affected com...

Suricata 3.1 - Open Source IDS / IPS / NSM engine

Suricata is a high performance Network IDS, IPS and Network Security Monitoring engine. Open Source and owned by a community run non-profit foundation, the Open Information Security Foundation OISF. Suricata is developed by the OISF and its supporting vendors. Top 3 Reasons You Should Try Suricat...

MySQL Server Login Possible

Nessus was able to log into the remote MySQL server using the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid91823; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/01/27"; scriptnameenglish:"MySQL Server Log...

Mozilla Firefox < 47.0 Multiple Vulnerabilities

Binary data 9383.prm...

Debian DLA-524-1 : squidguard security update

It was discovered that there was a reflected cross-site scripting vulnerability in squidguard, a filter and redirector plugin for Squid. For Debian 7 'Wheezy', this issue has been fixed in squidguard version 1.5-1+deb7u1. We recommend that you upgrade your squidguard packages. NOTE: Tenable Netwo...

Debian DLA-517-1 : imagemagick security update

The code did not check the integer didn't overflow before trying to resize a buffer. A specially crafted file could result in using memory past the end of the allocated buffer. This security CVEs for this issue CVE-2016-4563 along with CVE-2016-4562 and CVE-2016-4564 were based on a security...

Debian DLA-520-1 : horizon security update

It was discovered that there was an XSS vulnerability in horizon, a Django module providing web interaction with OpenStack. For Debian 7 'Wheezy', this issue has been fixed in horizon version 2012.1.1-10+deb7u1. We recommend that you upgrade your horizon packages. NOTE: Tenable Network Security h...

CVE-2016-5362

CVE-2016-5362 affects OpenStack Neutron’s IPTables firewall feature. The vulnerability exists in the DHCP-spoofing protection mechanism, allowing remote attackers to bypass anti-spoof controls and potentially cause a denial of service or intercept traffic via a crafted DHCP discovery. Affected re...

Vulnerabilities in BIND affects AIX,Vulnerabilities in BIND affects VIOS,Vulnerability in BIND affects AIX

bindadvisory12.asc: Version 5 Version 5 Issued: Mon Dec 4 14:20:31 CST 2017 Version 5 Changes: APAR table updated to reflect both APARs where relevant. IBM SECURITY ADVISORY First Issued: Fri Jun 17 08:19:25 CDT 2016 |Updated: Mon Dec 4 14:20:31 CST 2017 |Update: APAR table updated to reflect bot...

SUSE SLES11 Security Update : ntp (SUSE-SU-2016:1584-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:1596-1)

The SUSE Linux Enterprise 12 GA kernel was updated to fix one security issue. The following security bug was fixed : - CVE-2016-1583: Prevent the usage of mmap when the lower file system does not allow it. This could have lead to local privilege escalation when ecryptfs-utils was installed and...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1563-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...