SUSE: Security Advisory (SUSE-SU-2019:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

GO-2021-0090 Denial of service in github.com/tendermint/tendermint

Proposed commits may contain signatures for blocks not contained within the commit. Instead of skipping these signatures, they cause failure during verification. A malicious proposer can use this to force consensus failures...

Siemens network software vulnerabilities, related to an uncontrolled search element, allow attackers to execute arbitrary code or cause service failures.

Siemens’ network software vulnerabilities are related to an uncontrolled element in the search process. Exploiting these vulnerabilities can allow attackers to execute arbitrary code or cause service failures...

The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of NETGEAR ProSafe Plus JGS516PE microcontroller-based software, related to the lack of protection for service data, allows a intruder to trigger a service failure.

The vulnerability of NETGEAR ProSafe Plus JGS516PE microcontroller-based devices lies in the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures...

The vulnerability of the Apache TomEE application server, related to authentication errors, allows attackers to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the Apache TomEE application server is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges, execute arbitrary code, or cause service failures...

The vulnerability of Xen hypervisors relates to insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of Xen hypervisors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the microprogrammed software of NETGEAR’s GS110EMX, GS810EMX, XS512EM, and XS724EM devices lies in their authentication mechanisms’ deficiencies, allowing attackers to trigger service failures.

The vulnerability of the microprogrammed software of NETGEAR’s GS110EMX, GS810EMX, XS512EM, and XS724EM devices is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Routing Engine module of the JunOS operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Routing Engine module of the JunOS operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Routing Protocols Daemon (RPD) implementation in JunOS and JunOS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Routing Protocols Daemon RPD implementation in JunOS and JunOS Evolved systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

openSUSE Security Update : xen (openSUSE-2021-514)

This update for xen fixes the following issues : - CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 - CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 - L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut bsc1177204 - L3: XEN domU...

ALBA-2021:1088 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker never promotes a bundle until another transition unblocks it BZ1935240 pacemaker generate...

The vulnerability of the dockerd daemon, a deployment and application management automation tool in Docker-enabled environments, relates to a resource consumption control mechanism error. This vulnerability allows attackers to trigger service failures.

The vulnerability of the dockerd daemon, a tool for automating the deployment and management of applications in Docker containerized environments, is related to improper handling of the image manifest file. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability of the `srun --uid` command for SLURM resource managers stems from insecure privilege management. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the srun --uid command used by SLURM resource managers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Cisco IOS XE routers in the Network Convergence System 520 Series allows a attacker to cause a service failure.

The vulnerability of Cisco IOS XE routers in the Network Convergence System 520 Series is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the SLURM resource manager involves bypassing authentication by using an alternative path or channel. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SLURM resource manager relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the implementation of the fifth-generation network division mechanism (5G networks) into multiple independent virtual networks through “Network Slicing” arises from the lack of correlation between identifiers at the application layer and the transport layer. This allows attackers to disclose information about arbitrary network segments or cause service failures.

The vulnerability of the 5G network segmentation mechanism, which involves dividing the network into multiple independent virtual networks, is related to the lack of correlation between identifiers at the application layer and the transport layer. Exploiting this vulnerability can allow a malicio...

The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.

The vulnerability in the implementation of the usbipsockfdstore function in Linux operating system kernels is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...