[SECURITY] Fedora 30 Update: ipmitool-1.8.18-19.fc30

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...

CVE-2020-5208

A flaw was found in several functions of the IPMItool, where it failed to check data received from a LAN properly. An attacker could use this flaw to craft payloads, which can lead to a buffer overflow and also cause memory corruption, a denial of service, and remote code execution. Mitigation...

CVE-2020-5208

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

CVE-2020-5208

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

CVE-2020-5208 remote code execution vulnerability in ipmitool

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

CVE-2020-5208

It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially dangerous if ipmitool is run as a privileged...

UBUNTU-CVE-2013-3565

Multiple cross-site scripting XSS vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 command parameter to requests/vlmcmd.xml, 2 dir parameter to requests/browse.xml, or 3 URI in a request, which ...

DEBIAN-CVE-2014-9630

The rtppacketizexiphconfig function in modules/streamout/rtpfmt.c in VideoLAN VLC media player before 2.1.6 uses a stack-allocation approach with a size determined by arbitrary input data, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified...

DEBIAN-CVE-2019-14907

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" or above then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel-rt Multiple Vulnerabilities (NS-SA-2020-0008)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Insufficient access control in subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families;...

CVE-2019-9500

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmfwowlndresults...

Debian: Security Advisory (DLA-2063-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2063-1 : debian-lan-config security update

In debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server allowed password changes for other Kerberos user principals. For Debian 8 'Jessie', this problem has been fixed in version 0.19+deb8u2. We recommend that you upgrade your debian-lan-config packages. NOTE:...

[SECURITY] [DLA 2063-1] debian-lan-config security update

Package : debian-lan-config Version : 0.19+deb8u2 CVE ID : CVE-2019-3467 Debian Bug : 947459 In debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server allowed password changes for other Kerberos user principals. For Debian 8 "Jessie", this problem has been fixed in...

DLA-2063-1 debian-lan-config - security update

Bulletin has no description...

CVE-2019-19441

HUAWEI P30 smart phones with versions earlier than 10.0.0.166C00E66R1P11 have an information leak vulnerability. An attacker could send specific command in the local area network LAN to exploit this vulnerability. Successful exploitation may cause information leak...

CVE-2019-19441

HUAWEI P30 smart phones with versions earlier than 10.0.0.166C00E66R1P11 have an information leak vulnerability. An attacker could send specific command in the local area network LAN to exploit this vulnerability. Successful exploitation may cause information leak...

Information disclosure

HUAWEI P30 smart phones with versions earlier than 10.0.0.166C00E66R1P11 have an information leak vulnerability. An attacker could send specific command in the local area network LAN to exploit this vulnerability. Successful exploitation may cause information leak...

CVE-2019-19441

CVE-2019-19441 affects Huawei P30 smartphones running versions earlier than 10.0.0.166 (C00E66R1P11). The vulnerability enables information disclosure when an attacker sends specific commands over the local network (LAN). The issue is confirmed by Huawei’s security advisory HWPSIRT-2019-10001, wh...

CVE-2019-19441

HUAWEI P30 smart phones with versions earlier than 10.0.0.166C00E66R1P11 have an information leak vulnerability. An attacker could send specific command in the local area network LAN to exploit this vulnerability. Successful exploitation may cause information leak...