Fedora 33 : 1:libuv (2020-8dd4252dbe)

2020.09.26, Version 1.40.0 Stable Changes since version 1.39.0 : - udp: add UVUDPMMSGFREE recvcb flag Ryan Liptak - include: re-map UVEPROTO from 4046 to -4046 YuMeiJie - doc: correct UVUDPMMSGFREE version added cjihrig - doc: add uvmetricsidletime version metadata Ryan Liptak - win,tty: pass...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20201001)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 CVE-2020-15673 - Mozilla: XSS when pasting attacker-controlled data into a contenteditable element CVE-2020-15676 - Mozilla: Download origin spoofing via redirect CVE-2020-15677 - Mozilla: When recursing throu...

VyOS restricted-shell Escape / Privilege Escalation Exploit

This Metasploit module exploits command injection vulnerabilities and an insecure default sudo configuration on VyOS versions 1.0.0 through 1.1.8 to execute arbitrary system commands as root. VyOS features a restricted-shell system shell intended for use by low privilege users with operator...

VyOS restricted-shell Escape and Privilege Escalation

This module exploits command injection vulnerabilities and an insecure default sudo configuration on VyOS versions 1.0.0 use exploit/linux/ssh/vyosrestrictedshellprivesc msf exploitvyosrestrictedshellprivesc show targets ...targets... msf exploitvyosrestrictedshellprivesc set TARGET msf...

Fedora 32 : ansible (2020-d5e74bf9a0)

Update to upstream bugfix and security release 2.9.13. ---- Update to 2.9.12 upstream bugfix and security update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200908)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid140440;...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200826)

Security Fixes : - kernel: NULL pointer dereference in searchkeyring CVE-2017-2647 - kernel: heap-based buffer overflow in lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c CVE-2019-14896 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200826)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139893;...

Linux/x86 /dev/sda Partition Wiping Shellcode (35 bytes)

Exploit Title: Linux/x86 - Shred /dev/sda wipe partition Shellcode 35 bytes Google Dork: None Exploit Author: cybersaki Vendor Homepage: None Software Link: None Version: None Tested on: Kali linux 2020.2a i386 x86 CVE : none Shellcode-length : 35 SLAE-id : Purchased | email protected ; Descripti...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200707)

Security Fixes : - Mozilla: Information disclosure due to manipulated URL object CVE-2020-12418 - Mozilla: Use-after-free in nsGlobalWindowInner CVE-2020-12419 - Mozilla: Use-After-Free when trying to connect to a STUN server CVE-2020-12420 - Mozilla: Add-On updates did not respect the same...

Scientific Linux Security Update : unbound on SL6.x i386/x86_64 (20200622)

Security Fixes : - unbound: amplification of an incoming query into a large number of queries directed to a target CVE-2020-12662 - unbound: infinite loop via malformed DNS answers received from upstream servers CVE-2020-12663 C Tenable Network Security, Inc. The descriptive text is C Scientific...

OSS-Fuzz - Continuous Fuzzing Of Open Source Software

Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and stability bugs by deploying guided in-process fuzzing of...

Scientific Linux Security Update : microcode_ctl on SL6.x i386/x86_64 (20200610)

Security Fixes : - hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 - hw: L1D Cache Eviction Sampling CVE-2020-0549 - hw: Vector Register Data Sampling CVE-2020-0548 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200610)

Security Fixes : - kernel: NULL pointer dereference due to KEYCTLREAD on negative key CVE-2017-12192 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid137347; scriptversion"1.3";...

Scientific Linux Security Update : freerdp on SL6.x i386/x86_64 (20200609)

Security Fixes : - freerdp: Out-of-bounds write in cryptorsacommon in libfreerdp/crypto/crypto.c CVE-2020-13398 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid137292; scriptversion"1.4";...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20200603)

Security Fixes : - bind: BIND does not sufficiently limit the number of fetches performed when processing referrals CVE-2020-8616 - bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVE-2020-8617 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200416)

Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety...

Information Leakage

The kernel packages is vulnerable to an information leakage. A flaw was found in the printfatalsignal implementation in the Linux kernel. When "/proc/sys/kernel/print-fatal-signals" is set to 1 the default value is 0, memory that is reachable by the kernel could be leaked to user-space. This issu...

CVE-2017-18269

An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library aka glibc or libc6 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in...

Scientific Linux Security Update : ipmitool on SL6.x i386/x86_64 (20200406)

Security Fixes : - ipmitool: Buffer overflow in readfruareasection function in lib/ipmifru.c CVE-2020-5208 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135261; scriptversion"1.4";...