USN-6458-1 slurm-llnl, slurm-wlm vulnerabilities

It was discovered that Slurm did not properly handle credential management, which could allow an unprivileged user to impersonate the SlurmUser account. An attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2022-29500 It was discovered that Slurm did not proper...

CVE-2023-34048

vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution...

CVE-2021-26737

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition...

The vulnerability of the RPC server of the Samba networking communication software allows a attacker to trigger a service failure.

The vulnerability of the Samba networking communication server RPC server is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

OESA-2023-1756 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB...

OESA-2023-1757 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB...

The vulnerability affects the runtime of procedure calls in the Windows operating system, allowing attackers to exploit it to disclose sensitive information that is protected by security measures.

The vulnerability of the Remote Procedure Call component in the Windows operating system is related to the disclosure of information in the error data field. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

SUSE CVE-2023-3961

A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call RPC services like SAMR LSA or SPOOLSS, which Samba initiates o...

SUSE CVE-2023-42670

A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes for example,...

CVE-2023-36596

Remote Procedure Call Information Disclosure Vulnerability...

Information disclosure

Remote Procedure Call Information Disclosure Vulnerability...

CVE-2023-36596 Remote Procedure Call Information Disclosure Vulnerability

...

CVE-2023-36596 Remote Procedure Call Information Disclosure Vulnerability

...

CVE-2023-36596

CVE-2023-36596 is described as a Remote Procedure Call Information Disclosure Vulnerability with CVSS v3.1 base score 7.5 (HIGH). It is labeled as network-based with low attack complexity and no privileges or user interaction required, and it has a high confidentiality impact. The provided docume...

Remote Procedure Call Information Disclosure Vulnerability

...

Microsoft Windows Remote Procedure Call security vulnerability

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call. An attacker could exploit the vulnerability to obtain sensitive...

PT-2023-6230 · Samba +5 · Samba +5

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: A flaw was found in Samba, making it susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC serv...

PT-2023-28357 · Netatalk +4 · Netatalk +4

Name of the Vulnerable Software and Affected Versions: Netatalk versions 3.1.x through 3.1.16 Description: A Type Confusion issue was found in the Spotlight RPC functions in afpd. The problem arises when parsing Spotlight RPC packets, specifically with a key-value style dictionary where keys are...

DEBIAN-CVE-2023-4785

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

gRPC Security Vulnerabilities

gRPC is a modern, open-source, high-performance Remote Procedure Call RPC framework from gRPC Open Source. A security vulnerability exists in gRPC version 1.23 that stems from a lack of error handling in the TCP server, allowing an attacker to cause a denial of service by initiating a large numbe...