SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2023:0222-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0222-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow...

MAL-2023-992 Malicious code in yandex-yt-driver-rpc-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d0f9ac59839194083f459004f9fb0fbfac06a2f78f9cdfea46685072490801d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-yt-driver-rpc-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d0f9ac59839194083f459004f9fb0fbfac06a2f78f9cdfea46685072490801d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FreeBSD : Plex Media Server -- security vulnerability (98f78c7a-a08e-11ed-946e-002b67dfc673)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 98f78c7a-a08e-11ed-946e-002b67dfc673 advisory. - An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker with a footho...

SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:0162-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0162-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to bru...

SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2023:0163-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0163-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow...

SUSE SLES12: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:0164-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0164-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to bru...

Ubuntu 20.04 LTS / 22.04 LTS : Samba vulnerabilities (USN-5822-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5822-1 advisory. It was discovered that Samba incorrectly handled the bad password count logic. A remote attacker could possibly use this issue to bypass bad...

SUSE SLES12: libdcerpc-binding0 / libdcerpc-binding0-32bit / libdcerpc0 / etc (SUSE-SU-2023:0122-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0122-1 advisory. - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a...

ALSA-2023:0300 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: watch queue race condition can lead to privilege escalation CVE-2022-2959 kernel: memory corruption in AX88179178A based USB...

DragonCastle - A PoC That Combines AutodialDLL Lateral Movement Technique And SSP To Scrape NTLM Hashes From LSASS Process

A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process. Description Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDL...

GSD-2023-1001062 ksmbd: Fix resource leak in ksmbd_session_rpc_open()

ksmbd: Fix resource leak in ksmbdsessionrpcopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000648 ksmbd: Fix resource leak in ksmbd_session_rpc_open()

ksmbd: Fix resource leak in ksmbdsessionrpcopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v6.0.15 Description The issue is related to a double svc xprt put under NFSv4.1 in the event of an rpc create failure. The actual impact and potential for attack have not been proven yet. Recommendations For...

PT-2023-34655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9.229 through 4.9.336 Description The issue is related to a double svc xprt put on rpc create failure under NFSv4.1. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-34139

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a resource leak in the ksmbd session rpc open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-34443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...

PT-2023-34122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15.85 Description The issue is related to a problem in the nfsd under NFSv4.1, where a double svc xprt put occurs on rpc create failure. The actual impact and attack plausibility have not yet been proven...

PT-2023-33725

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a resource leak in the ksmbd session rpc open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

Ubuntu: Security Advisory (USN-5804-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...