CESNET libyang Multiple Stack Based Buffer Overflow Vulnerabilities

Description CESNET libyang is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary code in the context of a...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2019:3979 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

ghostscript, libgs security update

CentOS Errata and Security Advisory CESA-2019:3888 An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Redhat KeyCloak CVE-2019-14910 Authentication Bypass Vulnerability

Description Redhat KeyCloak is prone to an authentication-bypass vulnerability. Remote attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access. Technologies Affected Redhat keycloak 7.0.0 Redhat keycloak 7.0.1.Final Recommendations Block external acces...

Redhat KeyCloak CVE-2019-14909 Authentication Bypass Vulnerability

Description Redhat KeyCloak is prone to an authentication-bypass vulnerability. Remote attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access. Technologies Affected Redhat keycloak 7.0.0 Redhat keycloak 7.0.1.Final Recommendations Block external acces...

RHEL 6 : kernel (RHSA-2019:4056)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4056 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Memory corruption due to...

Redhat KeyCloak CVE-2019-14837 Information Disclosure Vulnerability

Description Redhat KeyCloak is prone to an information-disclosure vulnerability. Successful exploits may allow the attacker to obtain sensitive information or to perform unauthorized actions. This may lead to other attacks. Technologies Affected Redhat Single Sign-On 7.3 for RHEL 6 Redhat Single...

Red Hat redhat-upgrade-tool data forgery issue vulnerability

Red Hat redhat-upgrade-tool is a system upgrade tool from Red Hat USA. A data forgery issue vulnerability exists in Red Hat redhat-upgrade-tool, which can be exploited by an attacker to conduct an attack with forged data...

RHEL 7 : kernel (RHSA-2019:3979)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3979 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: KVM: OOB memory access via mmi...

FreeIPA CVE-2019-14867 Denial of Service Vulnerability

Description FreeIPA is prone to a denial-of-service vulnerability. Attackers can exploit this issue to execute arbitrary code or crash the affected application, denying service to legitimate users. FreeIPA versions 4.6 prior to 4.6.7, versions 4.7 prior to 4.7.4 and versions 4.8 prior to 4.8.3 ar...

FreeIPA CVE-2019-10195 Information Disclosure Vulnerability

Description FreeIPA is prone to a information-disclosure vulnerability. The attackers can exploit this issue to obtain sensitive information that may lead to further attacks. FreeIPA version 4.6.x through and prior to 4.6.7, 4.7.x through and prior to4.7.4 and 4.8.x through and prior to 4.8.3 are...

RHEL 6 : chromium-browser (RHSA-2019:3955)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3955 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 78.0.3904.108. Security Fixes:...

CVE-2011-3351

openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system...

RedHat Stronghold Detection

Checks whether Stronghold Web Server is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2014-3585

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions...

Design/Logic Flaw

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions...

CVE-2014-3585

redhat-upgrade-tool: Does not check GPG signatures when upgrading versions...

CVE-2014-3585

The CVE-2014-3585 entry concerns the Red Hat redhat-upgrade-tool, which does not verify GPG signatures when upgrading versions. This is described as enabling potential forgery or MitM-style abuse, with mitigations discussed in multiple sources. The impact is characterized as high (critical/remote...

PT-2019-7094 · Red Hat · Redhat-Upgrade-Tool

Name of the Vulnerable Software and Affected Versions: redhat-upgrade-tool affected versions not specified Description: The issue is related to the redhat-upgrade-tool not checking GPG signatures when upgrading versions. Recommendations: At the moment, there is no information about a newer versio...

RHEL 7 / 8 : ansible (RHSA-2019:3926)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:3926 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and do...