13679 matches found
CVE-2020-15897
CVE-2020-15897 affects Arista EOS where malformed IS-IS link-state PDUs can cause traffic loss or incorrect forwarding. Affected EOS versions are 4.21.12M and all 4.22.x prior to 4.22.7M, all 4.23.x prior to 4.23.5M, and all 4.24.x prior to 4.24.2F. The issue arises in the IS-IS router when proce...
Fedora 32 : singularity (2020-0fbf0db920)
Upgrade to upstream 3.6.4. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Fedora 33 : claws-mail (2020-1f60842034)
Update to 3.17.7 -- https://www.claws-mail.org/news.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Debian DLA-2415-1 : freetype security update
Sergei Glazunov discovered a heap-based buffer overflow vulnerability in the handling of embedded PNG bitmaps in FreeType. Opening malformed fonts may result in denial of service or the execution of arbitrary code. For Debian 9 stretch, this problem has been fixed in version 2.6.3-3.2+deb9u2. We...
Fedora 32 : mupdf / python-PyMuPDF / zathura-pdf-mupdf (2020-3cea1ac8f3)
mupdf 1.18.0 and depending packages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
Fedora 33 : mupdf / python-PyMuPDF / zathura-pdf-mupdf (2020-972ad7c8a8)
mupdf 1.18.0 and depending packages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
Fedora 33 : 1:wireshark (2020-9bda6ae1cd)
New version 3.2.7 Security fix for CVE-2020-25862, CVE-2020-25863, CVE-2020-25866 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 31 : ant (2020-3ce0f55bc5)
Update to version 1.10.9. Addresses CVE-2020-11979 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....
APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations
Summary This joint cybersecurity advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CKĀ® framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. Note: the analysis in this joint cybersecurity advisory is ongoing, and the...
Juniper Junos OS SRX Series: High CPU Load Utilization Vulnerability (JSA11081)
The version of Junos OS installed on the remote host is SRX Series prior to 12.3X48-D105, 15.1X49-D221, 17.4R3-S3, 18.1R3-S11, 18.2R3-S3, 18.3R2-S4, 18.4R2-S5, 19.1R2-S2, 19.2R1-S5, 19.3R3, or 19.4R2. It is, therefore, affected by a vulnerability as referenced in the JSA11081 advisory. Note that...
CVE-2018-18508
In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...
CVE-2019-17007
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service...
DEBIAN-CVE-2018-18508
In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...
CVE-2019-17006
In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow...
DEBIAN-CVE-2019-17006
In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow...
CVE-2019-17006
In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow...
CVE-2018-18508
In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service...
DEBIAN-CVE-2019-17007
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service...
Buffer overflow
In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow...