DEBIAN-CVE-2017-5207

Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...

CVE-2017-5207

Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...

Command injection

Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...

UBUNTU-CVE-2017-5207

Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...

CVE-2017-5207

Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...

CVE-2017-5207

Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument...

CVE-2016-6301

The recvandprocessclientpkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service CPU and bandwidth consumption via a forged NTP packet, which triggers a communication loop...

CVE-2016-6301

Technical details are not provided in the supplied documents. The initial description notes a BusyBox NTP DoS via forged NTP packets but no concrete technical specifics or remediation are provided here.

BlackNurse Spoofed ICMP Denial Of Service Proof Of Concept Vulnerability

Blacknurse is a low bandwidth ICMP attack that is capable of doing denial of service to well known firewalls. Most ICMP attacks that we see are based on ICMP Type 8 Code 0 also called a ping flood attack. BlackNurse is based on ICMP with Type 3 Code 3 packets. We know that when a user has allowed...

BlackNurse Spoofed ICMP Denial Of Service Proof Of Concept

!/usr/bin/perl Cisco ASA 5515/5525/5550/5515-X | Fotinet | Fortigate | SonicWall | PaloAlto | Zyxel NWA3560-N | Zyxel Zywall USG50 Spoofed "BlackNurse" DoS PoC Copyright 2016 c Todor Donev Varna, Bulgaria [email protected] https://www.ethical-hacker.org/...

Low Bandwidth DoS Tool: Slowloris

Low Bandwidth DoS Tool Slowloris is a type of denial of service attack invented by Robert “RSnake” Hansen which allows a single machine to take down another machine’s web server with minimal bandwidth and side effects on unrelated services and ports. Slowloris tries to keep many connections to th...

Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities + Credits: John Page hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/NAGIOS-NA-v2.2.1-MULTIPLE-CSRF.txt + ISR: ApparitionSec Vendor: =============== www.nagios.co...

New Relic: Cache purge requests are not authenticated

Hello there, Anyone can issue a PURGE request for any resource and invalidate your caches. That can lead to increased bandwidth costs but also potential Denial of Service attacks. Proof Fetching the resource headers, we can see in the X-Cache that the resource was a HIT with X-Cache-Hits: 50: $...

MIT Anonymity Network Riffle Promises Efficiency, Security

Researchers from MIT believe a new anonymity scheme they’ve devised dubbed Riffle could contend with Tor, claiming it’s every bit as secure as Tor, and bandwidth-efficient, to boot. According to a paper, “Riffle: An Efficient Communication System With Strong Anonymity,” .PDF released this week, t...

[SECURITY] Fedora 24 Update: iperf3-3.1.3-1.fc24

Iperf is a tool to measure maximum TCP bandwidth, allowing the tuning of various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, data-gram loss...

[SECURITY] Fedora 23 Update: iperf3-3.1.3-1.fc23

Iperf is a tool to measure maximum TCP bandwidth, allowing the tuning of various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, data-gram loss...

[SECURITY] Fedora 22 Update: iperf3-3.1.3-1.fc22

Iperf is a tool to measure maximum TCP bandwidth, allowing the tuning of various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, data-gram loss...

MGASA-2016-0215 Updated libgd packages fix security vulnerabilities

Updated libgd packages fix security vulnerabilities: The gdImageScaleTwoPass function in gdinterpolation.c in libgd before 2.2.0 uses inconsistent allocate and free approaches, which allows remote attackers to cause a denial of service memory consumption via a crafted call, as demonstrated by a...

Network Wide Hardware Ad Blocking: Pi-Hole

The Pi-hole can block ads for all devices on your network. All you need is a Raspberry Pi connected to your router. It was inspired as a low-cost,open source alternative to the AdTrap. The Pi-hole works on the the B, B+and Pi 2 it can also run on the Zero, but you need a micro-USB-to-Ethernet...

kernel security, bug fix, and enhancement update

2.6.32-573.26.1 - kernel revert 'sched: core: Use hrtimerstartexpires' Jiri Olsa 1326043 1324318 - kernel Revert 'Cleanup bandwidth timers' Jiri Olsa 1326043 1324318 - kernel revert 'fair: Test list head instead of list entry in throttlecfsrq' Jiri Olsa 1326043 1324318 - kernel revert 'sched, per...