CLSA-2022-1648136371 Fix of CVE: CVE-2022-22721, CVE-2022-23943, CVE-2022-22719, CVE-2022-22720

CVE-2022-22719: modlua: error out if luareadbody or luawritebody fail - CVE-2022-22720: simpler connection close logic if discarding the request body fails - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory - CVE-2022-23943: modsed: use sizet to allow for larger...

An Office Phone Flaw Can’t Be Fixed by Cisco Alone

The company released a patch this week, but security researchers say the root of the problem is beyond its control—and symptomatic of a larger issue...

PT-2020-14279 · Google +1 · Tensorflow +1

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1 Description: The issue arises when determining the common dimensio...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2020-50489)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Juniper Networks Junos OS MX Series. An attacker could exploit the vulnerability by...

Windows 8.1 Store and Windows Update client improvements: May 13, 2014

Windows 8.1 Store and Windows Update client improvements: May 13, 2014 This article describes some improvements for Windows Store and Windows Update in Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2. Check out the new features of this update and how to obtain this update. This update has...

Design/Logic Flaw

On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition VE when using virtio direct descriptors and packets 2 KB or larger...

Israeli Teen Accused of Running Bomb Threat Service Against Jewish Community Centers On Dark Web

By Waqas The authorities believe he is part of a larger bomb-threat-for-hire This is a post from HackRead.com Read the original post: Israeli Teen Accused of Running Bomb Threat Service Against Jewish Community Centers On Dark Web...

[SECURITY] Fedora 23 Update: salt-2015.5.8-1.fc23

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...

Konftel 300IP SIP-based Conference Phone - Remote Bypass Reboot

Exploit for hardware platform in category dos / poc The Konftel 300IP is a flexible SIP-based conference phone, perfect for companies that use IP voice services. Its clear, natural sound comes from OmniSound HD, Konftel’s patented wideband audio technology. The stylishly designed Konftel 300IP is...

kernel security and bug fix update

2.6.9-89.33.1.0.1.EL - XEN fix cpu hotplug crash Joe Jin orabug 7521308 - XEN Bring up vcpus before khelper init Joe Jin orabug 7521308 - XEN flush the tlb cache immediately Dave McCracken, Scott Shi orabug 9138767 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug...

Mafiaboy, Botnets and You

The botnet problem has grown to epidemic proportions, and in this video Threatpost editor Dennis Fisher talks about the roots of the problem and how it evolved into one of the larger threats on the Web...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

kernel security and bug fix update

2.6.9-89.0.3.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

kernel security and bug fix update

2.6.9-78.0.8.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with...

kernel security and bug fix update

2.6.9-67.0.20.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

CVE-2007-5240

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

CVE-2006-3123

Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...

CVE-2005-4744

Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...

Low: Red Hat Security Advisory: cpio security update

An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local...

arpwatch, libpcap, tcpdump security update

CentOS Errata and Security Advisory CESA-2005:421 Updated tcpdump packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. These updated packages also add support for output files larger than ...