CVE-2018-0050 Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.

An error handling vulnerability in Routing Protocols Daemon RPD of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1...

CVE-2018-0050

The CVE affects Juniper Networks Junos OS where receiving malformed MPLS RSVP traffic on an interface can crash the Routing Protocols Daemon (RPD), causing a sustained DoS. Affected versions include Junos OS 14.1 (prior to 14.1R8-S5, 14.1R9; 14.1X53-D48 on QFX), 14.2 (prior to 14.1X53-D130 on QFa...

CVE-2018-0048

The CVE-2018-0048 issue resides in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support in Junos OS. A network-based unauthenticated attacker can trigger memory exhaustion on affected devices, severely impacting performance and availability. Affected Junos OS versions i...

CVE-2018-0048: Uncontrolled Resource Consumption

A vulnerability in the Routing Protocols Daemon RPD with Juniper Extension Toolkit JET support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue onl...

CVE-2018-0050: Improper Input Validation

An error handling vulnerability in Routing Protocols Daemon RPD of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1...

[SECURITY] Fedora 29 Update: nng-1.0.1-2.fc29

nng nanomsg next generation is a socket library that provides several common communication patterns. It aims to make the networking layer fast, scalable, and easy to use. Implemented in C, it works on a wide range of operating systems with no further dependencies. The communication patterns, also...

Microsoft Device Guard Code Integrity Policy Security Feature Bypass (CVE-2018-8492)

A security bypass vulnerability exists in Microsoft Device Guard. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

SSL Insecure Protocols

The remote server offers insecure SSL protocol version which can lead to vulnerability exploitation. No source data...

[SECURITY] Fedora 29 Update: bind-9.11.4-10.P2.fc29

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 27 Update: openssl-1.1.0i-1.fc27

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2018-1295)

According to the version of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Concurrency. Supported versions that...

[SECURITY] Fedora 29 Update: curl-7.61.1-1.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

[SECURITY] Fedora 27 Update: curl-7.55.1-14.fc27

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2018-16807: Missing Release of Resource after Effective Lifetime

In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...

Securing the Convergence of IT with OT

The Industrial Internet of Things IIoT is the leading edge of the convergence of Operational Technology OT with IT. This convergence begins with network connectivity but requires enhancements in operational procedures, technology, and training as well. Beginning with the network, IT and OT use...

Travel Breaches Hit Air Canada and Asia-Pac Hotelier

It’s been a busy week on the data breach front. First, Air Canada said that a breach of around 20,000 mobile app users had exposed passport information. At the same time, millions have been affected by an information heist targeting a Chinese hotel group with 3,500 properties across the...

CentOS 6 : bind (CESA-2018:2571)

"An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Oracle Linux 6 : bind (ELSA-2018-2571)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2571 advisory. 32:9.8.2-0.68.rc1.1 - Fix CVE-2018-5740 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

“Unauthorized” error is thrown by SharePoint Online and/or OneDrive for business backup jobs

Challenge Backup jobs for SharePoint Online and/or OneDrive items fail with any of the following errors: 07-08-2018 11:11:39 3 6640 Error: The request failed with HTTP status 401: Unauthorized. 07-08-2018 11:11:39 3 6640 Type: System.Net.WebException 07-08-2018 11:11:39 3 6640 Stack: 07-08-2018...