CVE-2019-6672

On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is configured on a wildcard virtual server on platforms with hardware-based sPVA, the performance of the BIG-IP AFM system is degraded...

Hardcoded credentials

On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is configured on a wildcard virtual server on platforms with hardware-based sPVA, the performance of the BIG-IP AFM system is degraded...

CVE-2019-6672

CVE-2019-6672 affects F5 BIG-IP AFM when bad-actor detection is enabled on a wildcard virtual server on hardware-based sPVA. Affected versions: 15.0.0–15.0.1, 14.0.0–14.1.2, 13.1.0–13.1.3.1. Impact: degraded AFM performance, increased CPU usage, potential DoS as per advisory. Remediation: upgrade...

CVE-2019-6672

On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is configured on a wildcard virtual server on platforms with hardware-based sPVA, the performance of the BIG-IP AFM system is degraded...

How to Protect Holiday Shoppers from Bots and Scammers

It’s the most wonderful time of year for gift card scammers. With Black Friday, Cyber Monday and the holidays just around the corner, consumers will spend billions on gift cards for hard-to-shop-for friends, family, and colleagues. Imperva VP Tiffany Olson Kleemann was interviewed on Good Morning...

Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip

Google is willing to award up to $1.5 million to hackers who can successfully hack its Titan M security chip on the company’s Pixel devices as part of an expansion of its Android bug-bounty program unveiled this week. The company revealed increased payouts to its Android Security Rewards in a blo...

glibc security update

2.28-72.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

libsass:data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::SelectorList in Sass::Eval::operator

Detailed Report: https://oss-fuzz.com/testcase?key=5635227418624000 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000191b2a0 Crash State: Bad-cast to Sass::PreValue from...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

CVE-2011-1460 affects WebKit in Google Chrome prior to Blink M11. The vulnerability is a faulty cast to RenderBlock when anonymous blocks are renderblocks, caused by a type-casting issue in WebKit's rendering path. The impact, as reflected in CVSS, includes partial confidentiality, integrity, and...

Design/Logic Flaw

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository...

CVE-2013-1910

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository...

UBUNTU-CVE-2013-1910

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository...

CVE-2013-1910

yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse file in the metadata of a remote repository...

As Internet turns 50, more risks and possibilities emerge

This op-ed originally appeared in the San Francisco Chronicle on October 28, 2019. We occupy a richly-connected world. On the Internet, we collapse distance and shift time. But this Internet that delivers mail, connects us with friends, lets us work anywhere, and shop from the palm of the hand, i...

libreoffice:docxfuzzer: Bad-cast to SwIndexReg from invalid vptr in SwIndex::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5675859411468288 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

opensc:fuzz_pkcs15_decode: Bad-free in sc_pkcs15_decode_prkdf_entry

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5750809543573504 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15decode Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Bad-free Crash Address: 0x7ffc164d8fa8 Crash State...

libreoffice:docxfuzzer: Bad-cast to SwDrawContact from SwFlyDrawContact in FindFrameFormat

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5068778198532096 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: docxfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...