79 matches found
PT-2023-26562
Name of the Vulnerable Software and Affected Versions Ethereum Name Service ENS versions prior to 0.0.22 Description The issue is related to an integer overflow in the renew function, which could allow an attacker-controlled controller to reduce the expiration time of existing domains. This could...
How to Extend CA Validity Period and Renew FAS Certificates
This article is designed to describe how to extend CA Validity Period and renew FAS Certificates...
SUSE CVE-2020-13529
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server...
SUSE CVE-2022-3524
A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6renewoptions of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this...
Important: kernel-livepatch-4.14.294-220.533
Issue Overview: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6renewoptions of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a...
CLSA-2022-1670261781 Fix of 13 CVEs
CVE-2022-42703 - mm/rmap.c: don't reuse anonvma if we just want a copy - mm: rmap: explicitly reset vma-anonvma in unlinkanonvmas - mm, rmap: handle anonvmaprepare common case inline - mm/rmap: Fix anonvma-degree ambiguity leading to double-reuse CVE-2022-3565 - mISDN: fix use-after-free bugs in...
OESA-2022-2026 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open, aka a race condition between ufxopsop...
PT-2022-7114 · Linux +7 · Linux Kernel +7
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A memory leak issue was found in the Linux Kernel, specifically in the IPv6 Handler component, affecting the ipv6 renew options function. This issue can be exploited remotely, leading ...
Contracts calls to main ENS services will fail. Plus, ETHRegistrarController#withdraw() with future upgrades will revert
Lines of code Vulnerability details This is a classic Code4rena issue. The transfer call has a hard coded gas budget whenever this affect another part of the EVM will be very harmful for those usage which will make the system and its users at risk. There is two parts of this issue; when the calle...
USN-5013-2 systemd vulnerabilities
USN-5013-1 fixed several vulnerabilities in systemd. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that systemd incorrectly handled certain mount paths. A local attacker could possibly use this issue to cause systemd to crash,...
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
apache-commons-collections jss 4.8.1-2 - Bug 1932803 - HSM + FIPS: CMCRequest with a shared secret resulting in error 4.8.1-1 - Rebase to upstream JSS v4.8.1 - Red Hat Bugilla 1908541 - jss broke SCEP - missing PasswordChallenge class - Red Hat Bugilla 1489256 - RFE jss should support RSA with OA...
pki-core: Unprivileged users can renew any certificate
A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity...
renewyoumedical.com Improper Access Control vulnerability OBB-1495248
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
XenMobile Server - Netscaler Gateway Credential certificates (PKI) do not auto renew within the 60 days renewal time set
Question : XenMobile Server - Netscaler Gateway Credential certificates PKI do not auto renew within the 60 days renewal time set ? Answer : The NetScaler Gateway Credentials certificates are the user certificates which are directly bound from the Credential Provider to the NetScaler Gateway. Hen...
coolibahbuilding.com.au XSS vulnerability
Open Bug Bounty ID: OBB-258153 Description| Value ---|--- Affected Website:| coolibahbuilding.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
XenMobile Server - Identity credential certificates (PKI) do not auto renew
MSCA Certificates can be set to expire on a certain interval, after hitting the XMS renewal policy default 30 days before expiration. User Certificates PKI are not renewing, leaving expired certificates on devices...
CSRF Vulnerability Patched in GoDaddy Domain Settings
Domain registrar GoDaddy yesterday patched a cross-site request forgery vulnerability that could have allowed an attacker to change domain settings on a site registered with GoDaddy. The flaw was reported on Saturday and patched within 48 hours, according to Dylan Saccomanni, a web application...
