bind: Limiting simultaneous TCP clients is ineffective

A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone...

(Vulnerability) The vulnerability of the binary system for storing service information via systemd-journald arises from operations that go beyond the buffer in memory. This allows an attacker to trigger a service failure or execute code with journald privileges.

The vulnerabilities of the binary system for storing service information, systemd-journald and systemd-journal-remote, are due to operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow an attacker to cause a service failure or execute code with...

Arbitrary File Read Vulnerability in Sancai Journal Acquisition and Editing System

Sancai Journal Acquisition and Editing System is a networked office platform. Sancai Journal Acquisition and Editing System suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to read arbitrary files...

Product update: Virtuozzo 7.0 Update 9 Hotfix 2 (7.0.9-547)

The Hotfix 2 for for Virtuozzo 7.0.9 provides stability and usability bug fixes. Vulnerability id: PSBM-91577 Migration of a container from a Virtuozzo 7 Update 8 host to a Virtuozzo 7 Update 9 host initiated from Virtuozzo Automator could lead to a crash of vzmigrate. Vulnerability id: PSBM-9186...

The vulnerability of the jbd2_journal_dirtymetadata() function in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the jbd2journaldirtymetadata function in the Linux kernel is related to data writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a service failure by manipulating a specially created ext4 file system image...

openSUSE Security Update : systemd (openSUSE-2019-268)

This update for systemd fixes the following issues : Security vulnerability fixed : - CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user bsc1125352 Other bug fixes and changes : - journal-remote: set a limit on the number of...

SQL Injection Vulnerability in Sancai Journal Acquisition and Editing System

Sancai Journal Acquisition and Editing System is a networked office platform. SQL injection vulnerability exists in Sancai Journal Editorial System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2019:0428-1)

This update for systemd fixes the following issues : Security vulnerability fixed : CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user bsc1125352 Other bug fixes and changes: journal-remote: set a limit on the number of fields...

systemd: stack overflow when receiving many journald entries

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash...

USN-3871-5 linux-azure vulnerabilities

Wen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

systemd: stack overflow when receiving many journald entries

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash...

USN-3879-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

Wen Xu discovered that the ext4 file system implementation in the Linux kernel could possibly perform an out of bounds write when updating the journal for an inline file. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service system cras...

USN-3871-4 linux-hwe, linux-aws-hwe, linux-gcp vulnerabilities

USN-3871-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Wen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem...

RHEL 7 : systemd (RHSA-2019:0204)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0204 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides...

systemd: stack overflow when receiving many journald entries

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash...

USN-3871-1 linux vulnerabilities

Wen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Cross-site Scripting Vulnerability in China Knowledge Network's TengYun Journal Co-Editing System

TengCloud periodicals collaborative editorial system mainly improves the three main functions of expense management, network debut, and multi-journal joint management, and at the same time provides several practical gadgets to improve the efficiency of the editors' work. A cross-site scripting...

systemd: stack overflow when receiving many journald entries

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash...

Fedora 29 : systemd (2019-18b3a10c7f)

systemd-journald and systemd-journal-remote reject entries which contain too many fields CVE-2018-16865, 1664973 and set limits on the process' command line length CVE-2018-16864, 1664972 - Fix out-of-bounds read when parsing a crafted syslog message in systemd-journald CVE-2018-16866, 1664975 -...

systemd security update

219-62.0.4 - do not create utmp update symlinks for reboot and poweroff Orabug: 27854896 - OL7 udev rule for virtio net standby interface Orabug: 28826743 - fix netdev is missing for iscsi entry in /etc/fstab Orabug: 25897792 [email protected] - set 'RemoveIPC=no' in logind.conf as default fo...