SUSE SLES15 Security Update : xen (SUSE-SU-2021:1460-1)

This update for xen fixes the following issues : CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack bsc1178591, XSA-351 CVE-2021-3308: IRQ vector leak on x86 bsc1181254, XSA-360 CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 L3: conring size for XEN HV's with...

Cisco SD-WAN Solution Packet Filtering Bypass (cisco-sa-20190807-sd-wan-bypass)

According to its self-reported version, Cisco SD-WAN Solution is affected by a vulnerability in the packet filtering features due to improper traffic filtering conditions on an affected device. An unauthenticated, remote attacker can exploit this, by crafting a malicious TCP packet with specific...

CVE-2021-25141

CVE-2021-25141 affects certain HPE/Aruba L2/L3 switch firmware. The vulnerability stems from a data processing error due to improper handling of an unexpected data type in user-supplied information to the switch management interface, which could crash or reboot the switch management interface and...

Cisco IOS XE Software Packet Filtering Bypass (cisco-sa-cedge-filt-bypass-Y6wZMqm4)

According to its self-reported version, Cisco IOS XE is affected by a packet filtering bypass vulnerability. The vulnerability is due to improper traffic filtering conditions on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by crafting a malicious TCP...

Cisco IOS XE SD-WAN Software Packet Filtering Bypass (cisco-sa-cedge-filt-bypass-Y6wZMqm4)

According to its self-reported version, Cisco SD-WAN Solution is affected by a packet filtering bypass vulnerability. The vulnerability is due to improper traffic filtering conditions on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by crafting a malicio...

Widevine-L3-Decryptor - A Chrome Extension That Demonstrates Bypassing Widevine L3 DRM

Widevine is a Google-owned DRM system that's in use by many popular streaming services Netflix, Spotify, etc. to prevent media content from being downloaded. But Widevine's least secure security level, L3, as used in most browsers and PCs, is implemented 100% in software i.e no hardware TEEs,...

Google Mending Another Crack in Widevine

For the second time in as many years, Google is working to fix a weakness in its Widevine digital rights management DRM technology used by online streaming sites like Disney, Hulu and Netflix to prevent their content from being pirated. The latest cracks in Widevine concern the encryption...

Command Execution Vulnerability in KPS2204-2T4D-L3-L3

The KPS2204-2T4D-L3-L3 is a protocol converter device that integrates Ethernet and serial data transmission. The KPS2204-2T4D-L3-L3 suffers from a command execution vulnerability that can be exploited by an attacker to gain root privileges on the device...

Rockwell Automation/Allen-Bradley 1769-L30ERMS LOGIX5330ERMS CompactLogix 5370 L3 Processor

Binary data 750013.prm...

Rockwell Automation/Allen-Bradley 1769-L33ERMS LOGIX5333ERMS CompactLogix 5370 L3 Processor

Binary data 750017.prm...

Rockwell Automation/Allen-Bradley 1769-L37ERMOS LOGIX5337ERMOS Armor CompactLogix 5370 L3 Processor

Binary data 750021.prm...

Rockwell Automation/Allen-Bradley 1769-L37ERMO LOGIX5337ERMO Armor CompactLogix 5370 L3 Processor

Binary data 750020.prm...

Rockwell Automation/Allen-Bradley 1769-L36ERM LOGIX5336ERM CompactLogix 5370 L3 Processor

Binary data 750018.prm...

Rockwell Automation/Allen-Bradley 1769-L30ERM LOGIX5330ERM CompactLogix 5370 L3 Processor

Binary data 750012.prm...

Rockwell Automation/Allen-Bradley 1769-L30ER LOGIX5330ER CompactLogix 5370 L3 Processor

Binary data 750011.prm...

Rockwell Automation/Allen-Bradley 1769-L36ERMS LOGIX5336ERMS CompactLogix 5370 L3 Processor

Binary data 750019.prm...

Rockwell Automation/Allen-Bradley 1769-L33ERM LOGIX5333ERM CompactLogix 5370 L3 Processor

Binary data 750016.prm...

Rockwell Automation/Allen-Bradley 1769-L33ER LOGIX5333ER CompactLogix 5370 L3 Processor

Binary data 750015.prm...

Denial Of Service (DoS)

The openstack-neutron packages provide Openstack Networking neutron, the virtual network service. OpenStack Networking neutron is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main function is to manage connectivity to and from virtual...

Information Disclosure

libgcrypt is vulnerable to information disclosure attacks. The vulnerability exists as GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka...