Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2019-1222)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2731

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes to...

CVE-2020-2634

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Configuration Standard Framewk. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via...

CVE-2020-2612

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

CVE-2020-2623

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metrics Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

UBUNTU-CVE-2020-2654

Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

The vulnerability of the wlc_wpa_plumb_gtk driver for Broadcom Wi-Fi devices allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the wlcwpaplumbgtk driver for Broadcom Wi-Fi devices is related to buffer overflows in the “heap”. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a service failure by sending specially crafted Wi-Fi packets containing data...

Vulnerability of the npf_flower_spawn_phy_reprs() function (drivers/net/ethernet/netronome/nfp/flower/main.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the nfpflowerspawnPhyReprs function drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the wlc_wpa_sup_eapol driver from Broadcom Wi-Fi devices allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the wlcwpasupeapol driver for Broadcom Wi-Fi devices is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending specially crafted Wi-Fi packets containing data exceeding 32 bytes...

Vulnerability of the nfp_flower_spawn_vnic_reprs() function (drivers/net/ethernet/netronome/nfp/flower/main.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the nfpflowerspawnvnicreprs function in the drivers/net/ethernet/netronome/nfp/flower/main.c file of the Linux kernel is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the VoIP device Mitel MiVoice 5330e arises from an operation that goes beyond the buffer in memory, allowing an attacker to trigger a service failure and execute arbitrary code.

The vulnerability of the VoIP device Mitel MiVoice 5330e arises from an operation that goes beyond the buffer in memory during the processing of SIP/SDP packets. Exploiting this vulnerability allows a malicious actor to cause service failures and execute arbitrary codes...

The vulnerability of Huawei’s microprogrammed router software, related to reading data beyond the buffer in memory, allows attackers to cause service failures.

The vulnerability of Huawei’s microprogrammed router software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the microprogrammed Ethernet switch software from Moxa series EDS-405A lies in insufficient validation of input data, allowing a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending HTTP GET requests to the vulnerable device...

Sodinokibi Ransomware Behind Travelex Fiasco: Report

The Sodinokibi ransomware strain is apparently behind the New Year’s Eve attack on foreign currency-exchange giant Travelex, which has left its customers and banking partners stranded without its services. The criminals behind the attack are demanding a six-figure sum in return for the decryption...

F5 Networks BIG-IP : OpenSSH vulnerability (K32485746)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K32485746 advisory. sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a...

The vulnerabilities of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors D allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information.

Vulnerability of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors: exploitation may allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

Vulnerability of the drivers/net/wireless/ath/ath9k/htc_hst.c in Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the drivers/net/wireless/ath/ath9k/htchst.c kernel in the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory consumption...

The vulnerability of microprogrammed software in the Intel Baseboard Management Controller (BMC) allows a intruder to escalate their privileges, cause system failures, or gain unauthorized access to protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to...

The vulnerability of Intel Software Guard Extensions SDK, related to insufficient input data validation, allows attackers to disclose protected information, cause service failures, or gain unauthorized access to protected data.

The vulnerability of Intel Software Guard Extensions SDK relates to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

Vulnerability of the iwl_pcie_ctxt_info_gen3_init() function (drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the iwlpciectxtinfogen3init function located in the drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c file in the Linux kernel leads to uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...