CVE-2019-5608

CVE-2019-5608 affects FreeBSD kernels: ICMPv6 input path mishandles MLDv2 listener queries when the packet is fragmented across multiple mbufs. This can enable a remote attacker to trigger an out-of-bounds read or write, potentially causing the kernel to access unmapped memory and panic. Affected...

CVE-2019-11246

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2019:2228-1)

This update for postgresql10 fixes the following issues : Security issue fixed : CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner bsc1145092. Note that Tenable Network Security has extracted the preceding description blo...

CVE-2019-15753

CVE-2019-15753 affects OpenStack os-vif 1.15.x before 1.15.2 and 1.16.0, where a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge. This causes obligatory Ethernet flooding of non-local destinations, which degrades network performance and may allow users to view packet contents ...

CVE-2019-10056

Affected software: Suricata 4.1.3. Root cause: DecodeEthernet mishandles a crafted packet, causing the function to be executed a second time; it truncates the first part of the packet, mismanages the length, and ends up casting a packet with no type, crashing the process (denial of service). The ...

CVE-2019-10052

An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust environment runs into a panic in parseclientidoption in the dhcp/parser.rs file...

CVE-2019-10052

CVE-2019-10052 affects Suricata 4.1.3. The issue occurs when a network packet lacks the correct length, causing the DHCP parser to access the DHCP clientid option and triggering a Rust panic in parse_clientid_option (dhcp/parser.rs). This results in a denial of service via crash/uptime impact. Th...

Fortinet FortiOS (Mac OS X) 5.6.0 < 5.6.8 / 6.0.x < 6.0.5 multiple pre-auth XSS vulnerabilities on SSL VPN (FG-IR-18-383) (deprecated)

The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-18-383.nasl plugin ID 128278 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-18-383.nasl include"compat.inc"; if description scriptid12827...

Design/Logic Flaw

Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

CVE-2019-13263

D-Link DIR-825AC G1 (and related DIR-882 family) devices are affected by insufficient isolation between host and guest networks. The vulnerability arises when a DHCP Request with a Transaction ID causes the router to reply with an ACK/NAK, and the NAK can be sent to both Host and Guest networks u...

CVE-2019-13264

CVE-2019-13264 affects D-Link DIR-825AC G1 devices, exposing cross-network data flow between host and guest networks within the same device. The root cause is insufficient isolation, enabling data transfer via the IGMP Group IP field when a sender joins and leaves an IGMP group; the router then b...

CVE-2019-13265

The CVE refers to D-Link DIR-825AC G1 devices with insufficient isolation between host and guest networks. The router forwards ARP requests across the two networks, enabling a potential covert channel: an attacker can trigger ARP traffic to target arbitrary hosts on the same network. The document...

CVE-2019-13266

CVE-2019-13266 describes an insufficient compartmentalization vulnerability on TP-Link Archer C3200 V1 and Archer C2 V1 routers. The issue arises when a DHCP request’s 32-bit Transaction ID is reused across Host and Guest networks, causing the router to respond with a NAK to both networks and ena...

CVE-2019-13267

The CVE-2019-13267 entry concerns TP-Link Archer C3200 V1 and Archer C2 V1 routers with insufficient isolation between host and guest networks on the same device. The root cause is a mechanism where, during IGMP group joins/leaves, the router creates an IGMP Membership Query using the Group IP, s...

CVE-2019-13270

Edimax BR-6208AC V1 devices are affected by a cross-router covert-channel vulnerability where insufficient isolation between host and guest networks allows data to be transferred within the Group IP field of an IGMP packet. The vulnerability arises from withingroup communication enabled by the se...

CVE-2019-13271

CVE-2019-13271 affects the Edimax BR-6208AC V1 router, where insufficient isolation between host and guest networks on the same device allows ARP traffic to be forwarded across the two networks. The result is a potential cross-router covert channel: an attacker can issue an ARP request to an arbi...

EulerOS 2.0 SP8 : gcc (EulerOS-SA-2019-1825)

According to the versions of the gcc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The gcc package contains the GNU Compiler Collection version 4.8.You'll need this package in order to compile C code. - Security fixes: -...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20190806)

Security Fixes : - httpd: modauthdigest: access control bypass due to race condition CVE-2019-0217 - httpd: URL normalization inconsistency CVE-2019-0220 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128223;...

Scientific Linux Security Update : udisks2 on SL7.x x86_64 (20190806)

Security Fixes : - udisks: Format string vulnerability in udiskslog in udiskslogging.c CVE-2018-17336 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128267; scriptversion"1.4";...

Security vulnerabilities fixed in Thunderbird 68 — Mozilla

When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. If pages on different subdomains ever cooperatively use document.domain, then either page can abuse this to inject script into arbitrary pages on the other subdomain, even those that did...