Citrix SDWAN : Staging failing for all sites

All connected sites are going into failed state under change management after staging is initiated on the MCN : Also not able to download the staged package for any site using the Staged link in change management, as highlighted above...

The vulnerability of the EAP Server component of the EAP-PWD certification protocol for wireless communication devices with WPA encryption lies in the improper use of privileges, allowing attackers to compromise data integrity and confidentiality or cause service failures.

The vulnerability of the EAP Server component of the EAP-PWD protocol for wireless communication devices certified by WPA is related to the lack of explicit checks on imported elements. These imported elements do not undergo verification of scalar values and values of elements in the...

The vulnerability of the strncpy function in Atftpd arises from the possibility of the operation exceeding the buffer’s memory limit. This allows attackers to compromise data integrity and confidentiality, or cause service failures.

The vulnerability of the strncpy function in the Atftpd package is related to the sending of a 3-byte error message by the package. Exploiting this vulnerability allows an attacker to compromise data integrity and confidentiality, or cause service failures...

openSUSE Security Update : containerd / docker / docker-runc / etc (openSUSE-2019-1499)

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues : Security issues fixed : - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic C...

OPENSUSE-SU-2019:1506-1 Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic CPU...

The vulnerability of the Heimdal protocol’s Kerberos implementation in the Samba network communication software allows attackers to expose sensitive information or cause service failures.

The vulnerability of the Heimdal protocol’s Kerberos 5 implementation in the Samba network communication software package is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected informatio...

The vulnerability of Siemens’ software products lies in insufficient validation of input data, which allows a perpetrator to trigger service failures.

The vulnerability of Siemens’ software products is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures when responding to PROFINET DCP requests with specially crafted packets...

The vulnerability of SINAMICS PERFECT HARMONY GH180 software drivers, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker with access to the device over the network to cause service failures...

Vulnerability of .NET Core and Microsoft .NET Framework software platforms, related to errors in regular expression processing, allowing attackers to trigger service failures.

The vulnerability of.NET Core and Microsoft.NET Framework software lies in errors that occur during the processing of regular expressions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

UBUNTU-CVE-2019-12380

DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. physefisetvirtualaddressmap in arch/x86/platform/efi/efi.c and eficallphysprolog in arch/x86/platform/efi/efi64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because...

DEBIAN-CVE-2019-12380

DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. physefisetvirtualaddressmap in arch/x86/platform/efi/efi.c and eficallphysprolog in arch/x86/platform/efi/efi64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because...

CVE-2019-12380

CVE-2019-12380 is documented in multiple advisories referencing the Linux kernel EFI handling code. The connected sources specify that the vulnerability arises from how the EFI subsystem handles memory allocation failures in the x86 EFI path: phys_efi_set_virtual_address_map in arch/x86/platform/...

The vulnerability of Juniper Identity Management Service’s internal resource protection mechanism lies in insufficient validation of input data. This allows attackers to bypass SRX’s firewall policies or trigger service failures.

The vulnerability of Juniper Identity Management Service’s internal resource protection mechanism exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to bypass SRX’s firewall policies or cause service failures...

The vulnerability of Intel Broadwell processors stems from insufficient validation of input data, allowing attackers to exploit their privileges, cause system failures, or compromise the confidentiality of protected information.

The vulnerability of Intel Broadwell processors exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or compromise the confidentiality of protected information...

The vulnerability of the Spring Framework software platform, which arises due to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Spring Framework software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the TCP protocol implementation of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense micro-programming devices allows attackers to induce service failures.

The vulnerability of the TCP protocol implementation of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending high-speed packet...

SUSE-SU-2019:1234-1 Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic CPU...

The vulnerability of the SAP NetWeaver software integration platform lies in errors in processing external XML objects during XML file analysis, which allows attackers to trigger service failures.

The vulnerability of the SAP NetWeaver software integration platform is related to errors in processing external XML objects during the analysis of XML files XXE. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially crafted request...

The vulnerability of the Agent component in Dr.Web, a antivirus protection tool, allows a hacker to trigger a service failure.

The vulnerability of the Agent component in the Dr.Web anti-virus security tool, Dr.Web Enterprise Security Suite, exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause failures in named communication channels with user applications by...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. It was found that reporting emulation failures to user space could lead to either a local CVE-2014-7842 or a L2-L1 CVE-2010-5313 denial of service. In the case of a local denial of service, an attacker must have access to the MMIO area or be able to acce...