Intel SOC driver package for STK1A32SC security vulnerability

Intel SOC driver package for STK1A32SC is a computer stick from Intel Corporation USA. A security vulnerability exists in the Intel SOC driver package for STK1A32SC that arises from a lack of effective privilege-granting and access-control measures on a networked system or product...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

GaussDB Kernel: Enabling the Auditing of Permission Granting and Revoking

The parameter auditgrantrevoke specifies whether to audit the permissions granted to and revoked from database users. After this parameter is set to on, database account permissions are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

openGauss: Enabling the Auditing of Permission Granting and Revoking

The parameter auditgrantrevoke specifies whether to audit the permissions granted to and revoked from database users. After this parameter is set to on, database account permissions are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

openGauss: Controlling Roles with the WITH GRANT OPTION Permission

Users with the WITH GRANT OPTION permission can grant permissions on objects to other users. For database security purposes, control users having this permission. During permission granting, users with the WITH GRANT OPTION permission specify the objects and users with the WITH ADMIN OPTION...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

The vulnerability of the Sumac utility component, related to the lack of mechanisms for granting permissions, privileges, and controlling access, allows a violator to trigger the octath service.

The vulnerability of the Sumac utility component is related to the lack of mechanisms for granting permissions, privileges, and managing access control. Exploiting this vulnerability could allow a perpetrator to trigger the octath service...

CVE-2020-0665

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

October 15, 2019—KB4520015 (Preview of Monthly Rollup)

None None...

Android Permission License and Access Control Vulnerability (CNVD-2019-09145)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege-granting and access-control vulnerability exists in the Framework in Android version 8.0, which stems from a lack of effective privilege-granting and access-control measures in a...

Intel 8th Generation Intel Core Processor and 7th Generation Intel Core Processor Privilege Permission and Access Control Issues Vulnerability

The 8th Generation Intel Core Processor and 7th Generation Intel Core Processor are both products of Intel Corporation. 8th Generation Intel Core Processor is an 8th Generation Core Series The 8th Generation Intel Core Processor is an eighth-generation Core series central processing unit CPU, whi...

Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities vulnerability

Summary IBM Security Guardium has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2012-3324 DESCRIPTION: IBM DB2, when running on Microsft Windows, could allow a remote authenticated attacker to traverse directories on the system, caused by improper validation of...

DEBIAN-CVE-2016-3120

The validateasrequest function in kdcutil.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.13.6 and 1.4.x before 1.14.3, when restrictanonymoustotgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service NU...

DEBIAN-CVE-2015-2697

The buildprincipalva function in lib/krb5/krb/bldprinc.c in MIT Kerberos 5 aka krb5 before 1.14 allows remote authenticated users to cause a denial of service out-of-bounds read and KDC crash via an initial '\0' character in a long realm field within a TGS request...

Amazon Linux: Security Advisory (ALAS-2013-182)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.250.2 - crypto: aesni - fix memory usage in GCM decryption Stephan Mueller Orabug: 21077389 CVE-2015-3331 2.6.39-400.250.1 - xen/pciback: Don't disable PCICOMMAND on PCI device reset. Konrad Rzeszutek Wilk Orabug: 20807440 CVE-2015-2150 - xen-blkfront: fix accounting of reqs when...

Windows-Kerberos-MS14-068

Microsoft Windows Server contains a flaw related to the checksum in the Kerberos Key Distribution Center KDC component. The issue is triggered when the component fails to properly validate signatures. This may allow an authenticated remote attacker to use a forged Kerberos ticket signature to gai...

USN-2310-1 krb5 vulnerabilities

It was discovered that Kerberos incorrectly handled certain crafted Draft 9 requests. A remote attacker could use this issue to cause the daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. CVE-2012-1016 It was discovered that Kerberos incorrectly handled...