13948 matches found
[SECURITY] Fedora 31 Update: iwd-1.0-1.fc31
The daemon and utilities for controlling and configuring the Wi-Fi network hardware...
EulerOS 2.0 SP8 : cronie (EulerOS-SA-2019-2100)
According to the versions of the cronie packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service daemon crash via a large crontab file because th...
dtc-xen competitive conditions issue vulnerability
dtc-xen is a SOAP daemon primarily used for control panel management of Xen VMs. A contention condition issue vulnerability exists in version 0.5.x prior to dtc-xen 0.5.4. The vulnerability stems from mishandling of concurrent access when concurrent code is required to access shared resources...
[SECURITY] Fedora 31 Update: hostapd-2.9-2.fc31
hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground a nd acts as the backe...
EulerOS 2.0 SP5 : quagga (EulerOS-SA-2019-2228)
According to the versions of the quagga package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor...
USN-4177-1: Rygel vulnerability
It was discovered that the Rygel package automatically started the daemon by default in user sessions. In certain environments, this resulted in media being shared contrary to expectations...
Low: Red Hat Security Advisory: GNOME security, bug fix, and enhancement update
An update for GNOME is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. Note that the server socket...
lldpad security and bug fix update
An update is available for lldpad. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The lldpad packages provide the Linux user space daemon and configuration tool...
Low: lldpad security and bug fix update
The lldpad packages provide the Linux user space daemon and configuration tool for Intel's Link Layer Discovery Protocol LLDP Agent with Enhanced Ethernet support. Security Fixes: lldptool: improper sanitization of shell-escape codes CVE-2018-10932 For more details about the security issues,...
RLSA-2019:3673 Low: lldpad security and bug fix update
The lldpad packages provide the Linux user space daemon and configuration tool for Intel's Link Layer Discovery Protocol LLDP Agent with Enhanced Ethernet support. Security Fixes: lldptool: improper sanitization of shell-escape codes CVE-2018-10932 For more details about the security issues,...
ALSA-2019:3553 Low: GNOME security, bug fix, and enhancement update
GNOME is the default desktop environment of AlmaLinux. Security Fixes: evince: uninitialized memory use in function tiffdocumentrender and tiffdocumentgetthumbnail CVE-2019-11459 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd CVE-2019-12795 For more details about the security issues...
FreeBSD Denial of Service Vulnerability (CNVD-2019-40092)
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation.NSD is one of the name server daemons. A denial of service vulnerability exists in FreeBSD NSD versions prior to 3.2.13, which can be exploited by remote attackers to cause a denial of service crash...
CVE-2019-5043
An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...
CVE-2019-5043
An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...
Design/Logic Flaw
An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...
CVE-2019-5043
An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrestricted resource allocation, resulting in a denial of service. An attacker can connect multiple times to trigger this vulnerability...
CVE-2019-5043
The Nest Cam IQ Indoor Weave TCP connection denial-of-service (CVE-2019-5043) affects version 4620002. A fixed pool of TCP endpoints with no idle timeout leads to resource exhaustion when multiple connections are opened, denying service to other clients. TALOS advisories describe the vulnerabilit...