[SECURITY] Fedora 27 Update: systemd-234-10.git5f8984e.fc27

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

CVE-2018-0132

A vulnerability in the forwarding information base FIB code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base RIB and the FIB, resulting in a denial of service DoS condition. The vulnerability is due to incorrect...

CVE-2018-0132

A vulnerability in the forwarding information base FIB code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base RIB and the FIB, resulting in a denial of service DoS condition. The vulnerability is due to incorrect...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2018-05304)

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A denial of service vulnerability exists in the forwarding information base FIB code in Cisco IOS XR Software, which...

Cisco IOS XR Software Routing and Forwarding Inconsistency Denial of Service Vulnerability

A vulnerability in the forwarding information base FIB code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base RIB and the FIB, resulting in a denial of service DoS condition. The vulnerability is due to incorrect...

coTURN TURN server unsafe loopback forwarding default configuration vulnerability

Summary An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running o...

Fedora 27 : 1:xrdp (2017-1c73749b66)

Security fixes - Fix local denial of service CVE-2017-16927 958 979 fix already in 0.9.4-2 New features - Add a new log level TRACE more verbose than DEBUG 835 944 - SSH agent forwarding via RDP 867 868 FreeRDP/FreeRDP4122 - Support horizontal wheel properly 928 Bug fixes - Avoid use of hard-code...

CVE-2018-0004

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

CVE-2018-0005

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

Design/Logic Flaw

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

CVE-2018-0004 Junos OS: Kernel Denial of Service Vulnerability

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

openSUSE Security Update : openssh (openSUSE-2017-1351)

This update for openssh fixes the following issues : Security issue fixed : - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server bsc1065000. Bug fixes : - FIPS: Startup selfchecks bsc1068310. - FIPS: Silent complaints about unsupported key exchange methods bsc1006166...

SUSE-SU-2017:3230-1 Security update for openssh

This update for openssh fixes the following issues: Security issue fixed: - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server bsc1065000. Bug fixes: - FIPS: Startup selfchecks bsc1068310. - FIPS: Silent complaints about unsupported key exchange methods bsc1006166. -...

Q3 2017 Global DDoS Threat Landscape Report

Today we are releasing our latest Global DDoS Threat Landscape Report, a statistical analysis of 5,765 network and application layer DDoS attacks mitigated by Imperva Incapsula services during Q3 2017. Before diving into the report’s highlights, it should be mentioned that this quarter was marked...

CVE-2017-12262

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is...

[SECURITY] Fedora 25 Update: procmail-3.22-44.fc25

Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...

[SECURITY] Fedora 25 Update: dnsmasq-2.76-4.fc25

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

[SECURITY] Fedora 27 Update: procmail-3.22-44.fc27

Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...

ERS Data System 1.8.1 - Java Deserialization Exploit

Exploit for windows platform in category remote exploits Exploit Title: ERS Data System 1.8.1 Deserialize Vulnerability Google Dork: N/A Date: 9/21/2017 Exploit Author: West Shepherd Vendor Homepage: http://www.ersdata.com Software Link: www.ersdata.com/downloads/ErsSetup.exe Version: 1.8.1.0...

HTTP Virtual Host Scanner: VHostScan

A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 Key Benefits Quickly highlight unique content in catch-all scenarios Locate the outliers in catch-all scenarios where results...