Vulnerability Spotlight: Allen-Bradley Flex I/O vulnerable to denial of service

Jared Rittle of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. The Rockwell Automation Allen-Bradley Flex I/O input/output device is vulnerable to a denial-of-service vulnerability. FLEX I/O provides a wide range of input/output operations while keeping a smaller form factor. Use...

yara:macho_fuzzer: Heap-buffer-overflow in macho_handle_unixthread

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=4954503294091264 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: machofuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x604000003f40...

VeeamCDP I/O Filter Installation Fails With “The agent’s workflow is blocked” Error

Challenge When attempting to install the VeeamCDP I/O filter on a cluster that will be used for continuous data protection CDP, the installation fails with the following error: The agent's workflow is blocked until its required solutions are re-mediated externally in vSphere Lifecycle Manager...

PT-2021-7357 · Qemu +4 · Qemu +4

Name of the Vulnerable Software and Affected Versions: QEMU versions 2.10.0 through 5.2.0 Description: A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error in the mptsas free request function that does not...

FreeRDP IRP Compromise Data Compromise

The vulnerability of irp functions parallelprocessirpcreate, serialprocessirpcreate, driveprocessirpwrite, printerprocessirpwrite, rdpeirecvpdu, serialprocessirpwrite in the implementation of the remote desktop protocol FreeRDP is related to reading data beyond the buffer boundaries in memory...

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

Design/Logic Flaw

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

yara:macho_fuzzer: Heap-buffer-overflow in macho_handle_unixthread

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=6132432980017152 Project: yara Fuzzing Engine: afl Fuzz Target: machofuzzer Job Type: aflasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6120000008dc Crash State...

PT-2021-4267

Name of the Vulnerable Software and Affected Versions YARA versions prior to 4.0.4 Description The issue is related to an integer overflow and several buffer overflow reads in the libyara/modules/macho/macho.c module of YARA. This could allow an attacker to cause denial of service or information...

Emulation of Kernel Mode Rootkits With Speakeasy

In August 2020, we released a blog post about how the Speakeasy emulation framework can be used to emulate user mode malware such as shellcode. If you haven’t had a chance, give the post a read today. In addition to user mode emulation, Speakeasy also supports emulation of kernel mode Windows...

[ASA-202101-32] linux-hardened: directory traversal

Arch Linux Security Advisory ASA-202101-32 ========================================== Severity: Medium Date : 2021-01-20 CVE-ID : CVE-2020-28374 Package : linux-hardened Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-1443 Summary ======= The package linux-hardene...

[SECURITY] Fedora 32 Update: nodejs-12.20.1-1.fc32

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

CVE-2020-28374

In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a...

buf (>=0.1.0, <=0.2.1), i-o (>=0.1.0, <=0.4.1) +2 more potentially affected by CVE-2021-25907 via containers (>=0.1.1, <=0.8.5)

containers CARGO version =0.1.1, =0.1.0, =0.1.0, =0.13.0, =0.14.1 - lude 0.1.0 Source cves: CVE-2021-25907 Source advisory: OSV:RUSTSEC-2021-0010...

[SECURITY] Fedora 33 Update: nodejs-14.15.4-1.fc33

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

CVE-2021-22492: Buffer Copy without Checking Size of Input

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Broadcom Bluetooth chipsets software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 January 2021...

PT-2021-4833

Name of the Vulnerable Software and Affected Versions NPort IAW5250A-6I/O affected versions not specified Description The issue is related to information disclosure. It may allow a remote attacker to disclose web server information. Recommendations At the moment, there is no information about a...