KB5023752: Windows Server 2012 Security Update (March 2023)

The remote Windows host is missing security update 5023752. It is, therefore, affected by multiple vulnerabilities - Internet Control Message Protocol ICMP Remote Code Execution Vulnerability CVE-2023-23415 - Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2023-21708,...

KLA48554 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

KB5023754: Windows Server 2008 Security Update (March 2023)

The remote Windows host is missing security update 5023754. It is, therefore, affected by multiple vulnerabilities - Internet Control Message Protocol ICMP Remote Code Execution Vulnerability CVE-2023-23415 - Remote Procedure Call Runtime Remote Code Execution Vulnerability CVE-2023-21708,...

Apache Dubbo code issue vulnerability (CNVD-2023-23551)

Apache Dubbo is a lightweight Java-based RPC remote procedure call framework from the Apache Foundation in the United States. The product provides interface-based remote calling, fault tolerance and load balancing, and automatic service registration and discovery.A security vulnerability exists i...

Apache Spark < 2.4.6 RCE (CVE-2020-9480)

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

CentOS 7 : samba (RHSA-2023:1090)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1090 advisory. - Netlogon RPC Elevation of Privilege Vulnerability CVE-2022-38023 Note that Nessus has not tested for this issue but has instead relied only on the application...

Ubuntu 20.04 LTS : Samba vulnerabilities (USN-5936-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5936-1 advisory. Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue t...

Debian: Security Advisory (DSA-2018-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LSN-0092-1: Kernel Live Patch Security Notice

Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service system crash or execute arbitrary code.CVE-2022-4378 Tamás Koczka discovered that the Bluetooth L2CAP handshake...

Oracle Linux 7 : samba (ELSA-2023-1090)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1090 advisory. - related: 2154364 - Add additional patches for CVE-2022-38023 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fantastic RPC Interfaces and How to Find Them

Looking for your next security research project? Our RPC Interface Analyzer tool can help you find it...

Oracle Linux 8 : samba (ELSA-2023-0838)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0838 advisory. - related: rhbz2154369 - Add additional patch for CVE-2022-38023 - resolves: rhbz2154369 - Fix CVE-2022-38023 - resolves: rhbz2108331 - Fix CVE-2022-32742 Tenab...

K28360903: Linux Kernel vulnerability CVE-2021-28375

Security Advisory Description An issue was discovered in the Linux kernel through 5.11.6. fastrpcinternalinvoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308. CVE-2021-28375 Impact Ther...

K62832776: RPC portmapper vulnerability CVE-1999-0632

Security Advisory Description The RPC portmapper service is running. CVE-1999-0632 Impact This issue affects an unknown function of the component RPC portmapper service. The manipulation with an unknown input leads to a privilege escalation vulnerability impacting confidentiality, integrity, and...

K01494912: Samba vulnerability CVE-2018-1050

Security Advisory Description All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the...

K21312421: Samba vulnerabilities CVE-2020-25718 and CVE-2021-23192

Security Advisory Description CVE-2020-25718 A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets. CVE-2021-23192 A flaw was found in the way samba implemented...

K48281956: NFSv2/3 kernel vulnerability CVE-2017-7645

Security Advisory Description The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service system crash via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c. CVE-2017-7645 Impact There i...

K95010211: Samba vulnerability CVE-2019-14907

Security Advisory Description All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" or above then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provid...

K20804356: Samba vulnerabilities CVE-2019-3870 and CVE-2019-3880

Security Advisory Description CVE-2019-3870 A vulnerability was found in Samba from version including 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that...

K13719: Samba vulnerability CVE-2012-1182

Security Advisory Description The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code ...