Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

salmiya.grandhyper.com Cross Site Scripting vulnerability OBB-3235911

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Amazon Linux 2 : aws-nitro-enclaves-cli (ALASNITRO-ENCLAVES-2023-021)

The version of aws-nitro-enclaves-cli installed on the remote host is prior to 1.2.2-0. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2023-021 advisory. Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H...

Important: aws-nitro-enclaves-cli

Issue Overview: Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks. CVE-2022-31394 Affected Packages: aws-nitro-enclaves-cli Note: This advisory is applicable to Amazon Linux 2 ...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to carry out a DoS Denial-of-Service attack...

CVE-2023-23411

Windows Hyper-V Denial of Service Vulnerability...

CVE-2023-23411

Windows Hyper-V Denial of Service Vulnerability...

CVE-2023-23411

Windows Hyper-V Denial of Service Vulnerability...

CVE-2023-23411 Windows Hyper-V Denial of Service Vulnerability

...

CVE-2023-23411

CVE-2023-23411 : Windows Hyper-V Denial of Service vulnerability. The embedded metrics indicate a LOCAL attack vector with LOW privileges required, no user interaction, and an AV/C/I/A impact profile (Availability impact: HIGH). The description confirms a Hyper-V related DoS, but the supplied doc...

CVE-2023-23411 Windows Hyper-V Denial of Service Vulnerability

...

Windows Hyper-V Denial of Service Vulnerability

...

CVE-2023-23411: Uncontrolled Resource Consumption

Windows Hyper-V Denial of Service Vulnerability...

PT-2023-1732

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue exists due to insufficient input validation in the Hyper-V hardware virtualization system of Windows operating systems. This can allow an attacker to perform a...

KLA48553 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...

Intel CPU vulnerabilities fixed. But should you update?

Microsoft has released out of band updates for information disclosure vulnerabilities in Intel CPUs. The normal gut reaction would be to install out of band updates as soon as possible. Microsoft wouldnt be releasing the updates ahead of the regular cycle without good reason, would it? Well, mayb...

Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software allowing attackers to perform HTTP2 attacks.

...

AZL-61516 CVE-2022-31394 affecting package rust for versions less than hyper-0.14.25

Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...

CVE-2022-31394

Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...

AZL-35218 CVE-2022-31394 affecting package rpm-ostree for versions less than 2022.1-7

Hyperium Hyper before 0.14.19 does not allow for customization of the maxheaderlistsize method in the H2 third-party software, allowing attackers to perform HTTP2 attacks...