[SECURITY] Fedora 26 Update: capnproto-0.6.1-3.fc26

Cap=EF=BF=BD=EF=BF=BD=EF=BF=BDn Proto is an insanely fast data interchange format and capability-based RPC system. Think JSON, except binary. Or think Protocol Buffers, except faster. In fact, in benchmarks, Cap=EF=BF=BD=EF=BF=BD=EF=BF=BDn Proto is INFINITY TIMES faster than Protoco l Buffers. Th...

Microsoft Windows 'RPC' Remote Code Execution Vulnerability (KB4024323)

This host is missing a critical security update according to Microsoft KB4024323 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote code execution

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."...

CVE-2017-8461

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."...

CVE-2017-8461

CVE-2017-8461 affects Windows XP and Windows Server 2003, enabling remote code execution through the RRAS service. The vulnerability is a MIBEntryGet/overflow in RRAS’s DCERPC endpoint, exploitable via a crafted application and unauthenticated access on affected OS versions. Public details note e...

CVE-2017-8461

Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPC server which has Routing and Remote Access enabled via a specially crafted application, aka "Windows RPC Remote Code Execution Vulnerability."...

Microsoft Windows RPC CVE-2017-8461 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows Server 2003 Microsoft Windows...

[SECURITY] Fedora 26 Update: libtirpc-1.0.1-4.rc3.fc26

This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network Computing ONC, and is derived directly from the Solaris 2.3 source. TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V...

[SECURITY] Fedora 26 Update: rpcbind-0.2.4-7.rc1.fc26

The rpcbind utility is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.2 kernel was updated to 4.4.70 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-9076: The dccpv6requestrecvsock function in net/dccp/ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of...

Amazon Linux AMI : libtirpc (ALAS-2017-840)

Memory leak when failing to parse XDR strings or bytearrays It was found that due to the way rpcbind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. An attacker sending thousands of messages to rpcbind could cause its memory usage to grow without boun...

Google gRPC heap buffer overflow vulnerability (CNVD-2017-08554)

Google gRPC is the United States Google Google company developed a mobile and HTTP/2 design for open source, general-purpose RPC framework, with two-way flow, flow control, header compression, a single TCP connection on the multiple multiplexing requests and other features. A heap buffer overflow...

RPC DoS targeting *nix rpcbind/libtirpc

This module exploits a vulnerability in certain versions of rpcbind, LIBTIRPC, and NTIRPC, allowing an attacker to trigger large and never freed memory allocations for XDR strings on the target. This module requires Metasploit: https://metasploit.com/download Current source:...

Samba is_known_pipename() Code Execution

!/usr/bin/perl -w Remote Samba isknownpipename 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. Exploit By NA , NAattutanota.com The orginal bug was discovered by steelo CVE-2017-7494 https://www.samba.org/samba/security/CVE-2017-7494.html Tested on Samba 4.5.8-Debian Requirments for this exploit to run: perl...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:1442-1)

Wireshark was updated to version 2.2.6, which brings several new features, enhancements and bug fixes. Thses security issues were fixed : - CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in...

Fedora 25 : wordpress (2017-d968f5a95f)

WordPress 4.7.5 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.7.4 and earlier are affected by six security issues : - Insufficient redirect validation in the HTTP class. Reported by Ronni...

OracleVM 3.3 / 3.4 : rpcbind (OVMSA-2017-0107)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix for CVE-2017-8779 bz 1449461 - Soft static allocate rpc uid/gid bz 1300533 - Fix memory corruption in PMAPCALLIT code bz 1186933 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package...

Important: Red Hat Security Advisory: libtirpc security update

An update for libtirpc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

[SECURITY] Fedora 25 Update: libtirpc-1.0.1-4.rc3.fc25

This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network Computing ONC, and is derived directly from the Solaris 2.3 source. TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V...

WordPress Multiple Vulnerabilities (May 2017) - Linux

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...