A Definitive Guide to the Remote Procedure Call (RPC) Filter

...

GHSA-WGX7-JWWM-CGJV Improper Authentication in Apache Spark

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights...

PT-2022-16619 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2021.2.1 Description: The issue allows an unauthenticated attacker to cancel running builds via an XML-RPC request to the TeamCity server. Recommendations: For versions prior to 2021.2.1, update to version...

PT-2022-2246 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Procedure Call Runtime of the Microsoft Windows operating system. It allows remote attackers to execute arbitra...

PT-2022-2245 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code on the system...

Medium: kernel

Issue Overview: An issue was discovered in the Linux kernel. Fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages. This is a related issue to CVE-2019-2308. CVE-2021-28375 A flaw was found in the Linux kernel. The rtwwxsetscan driver...

Microsoft Patch Tuesday January 2022

Hello everyone! This episode will be about Microsoft Patch Tuesday for January 2022. Traditionally, I will use my open source Vulristics tool for analysis. This time I didnt make any changes to how connectors work. The report generation worked correctly on the first try. python3.8 vulristics.py...

Apache Dubbo Deserialization Vulnerability (CNVD-2022-05106)

Apache Dubbo is a lightweight Java-based RPC remote procedure call framework from the Apache Foundation in the United States. The product provides interface-based remote calling, fault tolerance and load balancing, and automatic service registration and discovery. Apache Dubbo in version 3.2.11 a...

PT-2022-6577 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing...

Palo Alto Networks Cortex XDR 代码问题漏洞

Palo Alto Networks Cortex XDR is a security operations platform for remote endpoint-based detection from Palo Alto Networks Malaysia. An elevation of privilege vulnerability exists in the Palo Alto Networks Cortex XDR agent that originates from an incorrectly programmed call to an advanced local...

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-21922

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

Remote code execution

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-21922 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Microsoft Windows Remote Procedure Call Runtime 缓冲区错误漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected:Windows...

PT-2022-15187 · Microsoft · Remote Procedure Call (Rpc) Runtime +1

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Procedure Call RPC Runtime affected versions not specified Description: The issue allows remote attackers to execute arbitrary code, affecting the system. Recommendations: At the moment, there is no information about a newer...

samba: Subsequent DCE/RPC fragment injection vulnerability

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...