Compatibility update for installing Windows 10, version 1803: June 11, 2019

None None...

Compatibility update for installing Windows 10, version 1809: June 11, 2019

None None...

SINAMICS PERFECT HARMONY GH180 Driver Restart

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to configuration errors. Exploiting this vulnerability could allow an attacker, who has access to the device via the field bus, to cause the controller to restart by performing read/write requests for parameters...

Cisco NX-OS SNMP DoS

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco NX-OS and Cisco FX-OS systems is related to improper error handling. Exploiting this vulnerability allows an attacker to repeatedly restart the application and cause service failures...

PT-2019-6326 · Supervisor +3 · Supervisor +3

Name of the Vulnerable Software and Affected Versions: Supervisor versions 4.0.2 and earlier Description: The issue is related to the inet http server component, which can allow an unauthenticated user to read log files or restart a service if it is enabled and no password is set. The maintainer...

Compatibility update for installing Windows 10, version 1903: May 29, 2019

None None...

container uid changes to root after first restart or if image is already pulled to the node

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L, 4.9 medium In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 root on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true,...

CVE-2019-12312

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKESAINIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKEAUTH exchange. This affects...

CVE-2019-12312

CVE-2019-12312 affects Libreswan 3.27, where an assertion failure in send_v2N_spi_response_from_state (ikev2_send.c) can be triggered by an IKEv2 SA_INIT followed by a bogus INFORMATIONAL exchange, causing a NULL pointer dereference and a restart of the pluto IKE daemon. The issue is documented a...

CVE-2019-12312

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKESAINIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKEAUTH exchange. This affects...

CVE-2019-12312

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKESAINIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKEAUTH exchange. This affects...

CVE-2019-12312: NULL Pointer Dereference

In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKESAINIT exchange, followed by a bogus INFORMATIONAL exchange instead of the normallly expected IKEAUTH exchange. This affects...

Compatibility update for installing Windows 10, version 1803: May 21, 2019

None None...

Design/Logic Flaw

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly...

CVE-2019-1858

Summary (CVE-2019-1858) : A vulnerability in the SNMP input packet processor on Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, leading to repeated restarts and a DoS condition. Root cause is imprope...

MOBIKE key exchange Memory Leak Restart

The vulnerability of the MOBIKE microprogramming-based key exchange service of Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to trigger memory leaks or restart the vulnerable...

PT-2019-2152 · Cisco · Cisco Nx-Os +2

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software affected versions not specified Cisco NX-OS Software affected versions not specified Description: A vulnerability in the Simple Network Management Protocol SNMP input packet processor could allow an unauthenticated, remote...

CVE-2019-6574

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All...

Code injection

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All...

CVE-2019-6574

CVE-2019-6574 affects Siemens SINAMICS PERFECT HARMONY GH180 (NXG I/NXG II) with MLFBs 6SR2...-, 6SR3...-, 6SR4...- (options G21–G46). Root cause: improperly configured Parameter Read/Write execution via Fieldbus network, enabling a remote attacker with network access to restart the controller an...