5328 matches found
Design/Logic Flaw
This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to...
CVE-2021-28509
CVE-2021-28509 : Arista EOS TerminAttr and OpenConfig transport can leak MACsec data in clear text to authorized users, enabling potential decryption/modification of MACsec traffic. Affected: EOS devices with Octa and TerminAttr enabled; specific affected versions include EOS 4.23.x–4.27.x trains...
PT-2022-9901
Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description The issue affects the Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. In certain conditions, TerminAttr might leak MACsec sensitive data in clear...
com.microsoft.azure.iot:iothub-react_2.11 (0.9.0), com.microsoft.azure.iot:iothub-react_2.12 (0.9.0) +4 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.13.0)
com.microsoft.azure:azure-eventhubs MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure.iot:iothub-react2.11 0.9.0 - com.microsoft.azure.iot:iothub-react2.1...
com.microsoft.azure:spark-streaming-eventhubs_2.11 (>=2.0.8, <=2.1.4), com.microsoft.azure:spark-streaming-eventhubs_connector_2.11 (>=2.0.8, <=2.1.4) +1 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.14.3)
com.microsoft.azure:azure-eventhubs MAVEN version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:spark-streaming-eventhubs2.11 =2.0.8, =2.0.8, =2.0.8, =2.1.4 Source...
com.microsoft.azure:azure-eventhubs-eph (>=0.14.0, <=0.14.1), com.microsoft.azure:spark-streaming-eventhubs_2.11 (>=2.0.7, <=2.1.1) +2 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.14.0)
com.microsoft.azure:azure-eventhubs MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph =0.14.0, =2.0.7, =2.0.7, =2.0.7, =2.1.1 Source...
Integer overflow in the bundled Brotli C library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli...
GHSA-5V8V-66V8-MWM7 Integer overflow in the bundled Brotli C library
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli...
Missing Initialization of Resource in Apache Arrow
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...
Fedora: Security Advisory for libarchive (FEDORA-2022-bbb5ec21b2)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: libarchive-3.5.3-2.fc36
Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
Users Can Game Yield Distributions
Lines of code Vulnerability details Impact processYield restricts who can call this function to just the vault admin. Upon being processed, the treasury receives its fair share of the yield and the rest is transferred to the YieldManager.sol contract. To distribute yield, the manager calls...
GHSA-WQ2P-Q66W-Q8GP Apache Tomcat Denial of Service vulnerability
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling 1 a large total amount of chunked data or 2 whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial o...
GHSA-475F-74WP-PQV5 Integer Overflow or Wraparound in Apache Tomcat
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service resource consumption via a malformed chunk size in chunke...
Integer Overflow or Wraparound in Apache Tomcat
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service resource consumption via a malformed chunk size in chunke...
Improper Input Validation in Apache Santuario XML Security
Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document...
GHSA-W7CQ-J9P9-HM3M Improper Input Validation in Apache Santuario XML Security
Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document...
6 Legal and Free Streaming Services to Consider in 2022
By Waqas The streaming industry is changing rapidly with new services popping up and others disappearing, its important to stay… This is a post from HackRead.com Read the original post: 6 Legal and Free Streaming Services to Consider in 2022...
CVE-2022-28691
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when a Real Time Streaming Protocol RTSP profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic...
