Security Apps Fail to Detect Malware Threats Due to Windows Kernel Bug

By Waqas According to security researchers, there is a decade old bug This is a post from HackRead.com Read the original post: Security Apps Fail to Detect Malware Threats Due to Windows Kernel Bug...

CVE-2017-12213

A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...

CVE-2017-12213: Improper Authentication

A vulnerability in the dynamic access control list ACL feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port to fail open. This could allow the attacker to pass traffic...

PT-2017-12403

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches affected versions not specified Description A vulnerability in the dynamic access control list ACL feature could allow an unauthenticated, adjacent attacker to cause dynamic...

Authentication flaw

There is a reachable assertion abort in the function calcstepsizes in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial of service attack...

gdm and gnome-session security, bug fix, and enhancement update

gdm 3.22.3-11 - Add japanese translation Resolves: 1449632 3.22.3-10 - Add patches to try to maintain some semblance of compatibility when live upgrading between 7.3 and 7.4 Related: 1448786 3.22.3-9 - Make sure reauthentication is run within the user session. Resolves:1448209 3.22.3-8 - Reap...

Buffer overflow

IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569...

CVE-2017-1310

IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the server. Done enough times, this could use large parts of the file system and cause the server to crash. IBM X-Force ID: 125569...

CVE-2017-1310

IBM Informix Dynamic Server 12.10.xC8W2 fixes CVE-2017-1310, a buffer overflow in FORMAT_UNITS() caused by improper validation of user input. An authenticated remote attacker could trigger the overflow, writing large assertion fail files to the server and potentially crashing it. The publicly doc...

PT-2017-12916

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 12.1 Description The issue allows an authenticated user to cause a buffer overflow, resulting in large assertion fail files being written to the server. Repeated exploitation could consume large parts of the...

Configure VMAC on Channel Group

To demonstrate how to configure Virtual MAC on NetScaler Interface Channel LACP or LR. The primary reason for using VMACs is that GARP may not be honored by Layer 3 devices in your Network. This can cause communication issues which will present during fail-over of a NetScaler. The resolution to...

Microsoft Windows 8 / 2012 R2 (x64) - EternalBlue SMB Remote Code Execution (MS17-010) Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python from impacket import smb from struct import pack import os import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten...

R7-2016-23, R7-2016-26, R7-2016-27: Multiple Home Security Vulnerabilities

Executive Summary In October of 2016, former Rapid7 researcher Phil Bosco discovered a number of relatively low-risk vulnerabilities and issues involving home security systems that are common throughout the United States, and which have significant WiFi or Ethernet capabilities. The three systems...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2017:1048-1)

This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed bsc1030050 : - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock -...

Default credentials

An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to...

GNU glibc 'pop_fail_stack()' function denial of service vulnerability

GNU C Library is an open source, free C compiler released under the LGPL license. A denial of service vulnerability exists in the 'popfailstack' function in GNU C Library. A remote attacker could exploit the vulnerability to submit a special request that would crash the application...

UBUNTU-CVE-2015-8985

The popfailstack function in the GNU C Library aka glibc or libc6 allows context-dependent attackers to cause a denial of service assertion failure and application crash via vectors related to extended regular expression processing...

Microsoft KB4013429 breaks Hyper-V 2016 Backup

Challenge After installing Microsoft KB4013429 update on a Hyper-V host, Hyper-V backups may fail. Removing the update may cause the host to enter a BSOD loop. Cause The problem appears only if KB4013429 update is installed not on all nodes of a Hyper-V cluster. In more detail, the issue persists...

PT-2017-4265 · Gnu +2 · Gnu C Library +2

Name of the Vulnerable Software and Affected Versions: GNU C Library affected versions not specified Description: The issue is related to the pop fail stack function in the GNU C Library, which can be exploited by attackers to cause a denial of service, resulting in an assertion failure and...

Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20170220)

Security Fixes : - An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite. CVE-2017-3731 - A denial of service flaw was found in th...