2641 matches found
Mozilla Firefox < 67.0.4
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 67.0.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2019-19 advisory. - Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can...
Security vulnerabilities fixed in Thunderbird 60.7.2 — Mozilla
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. Insufficient vetting of parameters passed with the Prompt:Open IPC message between chi...
Dahua IPC-HFW1XXX, IPC-HDW1XXX and IPC-HFW2XXX Buffer Overflow Vulnerabilities
The Dahua IPC-HFW1XXX is an IP camera from Dahua, China. A buffer overflow vulnerability exists in the Dahua IPC-HFW1XXX, IPC-HDW1XXX, and IPC-HFW2XXX. The vulnerability exists in the functionality used to redirect the display of printed information from the serial port, which is not used by the...
Privilege Escalation
pacemaker is vulnerable to privilege escalation. Insufficient verification of client-side authentication combined with other IPC weaknesses leads to local privilege escalation...
Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20190528)
Security Fixes : - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc CVE-2018-16877 - pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS CVE-2018-16878 - pacemaker: Information disclosure...
Privilege Escalation
Firefox and Firefox ESR are vulnerable to privilege escalation attacks. This is because the authentication is insufficient for channels created after the IPC process is started which allow for a sandbox escape through IPC channels due to lack of message validation in the listener process, result ...
Information Disclosure
Thunderbird, Firefox ESR and Firefox are vulnerable to information disclosure vulnerability. A remote unauthenticated attacker could compromise IPC child process and list the names of arbitrary files on the file system resulting in exposure of private local files...
Sandbox Restrictions Bypass
Thunderbird, Firefox ESR and Firefox are vulnerable to sandbox restrictions bypass. A remote unauthenticated user could cause memory corruption in the parent process due to the lack of parameter validation on IPC messages resulting in a system hang...
Ubuntu 19.04 : Linux kernel vulnerabilities (USN-3979-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)
Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian Osterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered...
EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1533)
According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw was found in the way the Linux kernel's netfilter connection tracking implementation loaded...
Fedora Update for libqb FEDORA-2019-e2d5de3342
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 28 Update: libqb-1.0.5-1.fc28
libqb provides high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication IPC, and polling...
Fedora 28 : libqb (2019-e2d5de3342)
Security fix for 'Insecure treatment of IPC temporary files' CVE pending Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 29 : libqb (2019-d5b80d05b9)
Security fix for 'Insecure treatment of IPC temporary files' CVE pending Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 29 Update: libqb-1.0.5-1.fc29
libqb provides high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication IPC, and polling...
Denial Of Service (DoS)
The kernel packages contain the Linux kernel, the core of any Linux operating system. A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could u...
Fedora 30 : libqb (2019-67e684044e)
Security fix for 'Insecure treatment of IPC temporary files' CVE pending Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 30 Update: libqb-1.0.5-1.fc30
libqb provides high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication IPC, and polling...
LockerGoga Ransomware Family Used in Targeted Attacks
ARCHIVED STORY LockerGoga Ransomware Family Used in Targeted Attacks By ATR Operational Intelligence Team · April 29, 2019 Co-authored by Marc RiveroLopez. Initial discovery Once again, we have seen a significant new ransomware family in the news. LockerGoga, which adds new features to the tried...
LockerGoga Ransomware Family Used in Targeted Attacks
ARCHIVED STORY LockerGoga Ransomware Family Used in Targeted Attacks By ATR Operational Intelligence Team · April 29, 2019 Co-authored by Marc RiveroLopez. Initial discovery Once again, we have seen a significant new ransomware family in the news. LockerGoga, which adds new features to the tried...