EulerOS 2.0 SP2 : gnutls (EulerOS-SA-2019-1112)

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that GnuTLS's implementation of HMAC-SHA-384 was vulnerable to a Lucky Thirteen-style attack. A remote attacker could use this flaw to...

EulerOS 2.0 SP5 : gnutls (EulerOS-SA-2019-1136)

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that GnuTLS's implementation of HMAC-SHA-384 was vulnerable to a Lucky Thirteen-style attack. A remote attacker could use this flaw to...

BSA-2019-110

Security Advisory ID : BSA-2019-110 Component : glibc Revision : 2.0 Stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of...

CVE-2019-1740

A vulnerability in the Network-Based Application Recognition NBAR feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability are due to a parsing issue on DNS packets. An attacker could exploit...

CVE-2019-1737 Cisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

CVE-2019-1737 Cisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability

A vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service DoS condition on the affected device. The vulnerability is due ...

SUSE-SU-2019:13982-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492. -...

PT-2019-1601 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling requests in the Windows SMB protocol implementation, which can be exploited by a remote attacker to gain unauthorized access to protected...

The vulnerability of microprogrammed software in Siemens Simatic S7-400 programmable logic controllers is related to errors in checking input data by Ethernet, PROFIBUS, and MPI interfaces. This allows a malicious actor to trigger a service failure.

The vulnerability of microprogrammed programmable logic controllers from Siemens Simatic S7-400 is related to errors in the validation of input data by Ethernet, PROFIBUS, and MPI interfaces. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system by sending a...

The vulnerability of Siemens’ communication module software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure of the module.

The vulnerability of Siemens’ communication module’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the module by sending specially crafted packets to port 102/TCP...

The vulnerability of the programmable logic integrated circuit that controls the input buffer of Cisco Firepower 9000 Series software-based network interfaces allows a intruder to cause a service failure.

The vulnerability of the programmable logic integrated circuit that controls the input buffer of Cisco Firepower 9000 Series software lies in the handling of various types of input packets. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service attack by sending a...

PT-2019-1559 · Cisco · Nexus 7000 Series Switches +12

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75 Cisco NX-OS Software versions prior to 7.03I71 on Nexus 3000 Series Switches Cisco NX-OS Software versions prior to 7.03I72 on Nexus 3500 Platform Switches Cisco NX-OS...

The vulnerability of Siemens’ communication module software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure of the module.

The vulnerability of Siemens’ communication module’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the module by sending specially crafted packets to port 102/TCP...

Remote code execution

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'...

Moxa IKS and EDS Uncontrolled Resource Consumption Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. An uncontrolled resource consumption vulnerability exists in the Moxa IKS and EDS series. A remote authenticated attacker could exploit this vulnerability via specially crafted packets to cause a denial of service, which coul...

The vulnerability of the SMBv2 component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SMBv2 component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by sending a specially crafted package to the SMBv2 server...

The vulnerability of the IEC 61850-MMS protocol processor in Siemens network equipment’s microprogramming software allows a perpetrator to induce a service failure.

The vulnerability of the IEC 61850-MMS protocol processor in Siemens’ micro-programmed network equipment is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets to port...

BusyBox Project BusyBox udhcp Option Out of Bounds Read (CVE-2018-20679)

An out-of-bounds read vulnerability has been reported in the udhcp module of BusyBox. This vulnerability is due to insufficient validation of the length of certain options in a DHCP packets. A remote attacker could exploit this vulnerability by sending maliciously crafted messages to a DHCP clien...

Cisco Firepower 9000 Series Resource Management Error Vulnerability

Cisco Firepower 9000 Series is a 9000 series firewall appliance from Cisco USA. The Cisco Firepower 9000 Series has a resource management error vulnerability that originates from a logic error in the field programmable gate array. An attacker could cause a denial of service by sending specially...

The vulnerability of Siemens’ PROFINET DCP software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of Siemens’ PROFINET DCP software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures in the local Ethernet segment using specially crafted PROFINET DCP broadcast packets...