41 matches found
laurel
Linux Audit – Registro utilizable, robusto y fácil LAUREL es un complemento de postprocesamiento de eventos para auditd8 que genera registros de auditoría JSON enriquecidos y útiles, adecuados para configuraciones modernas de monitoreo de seguridad. La documentación correspondiente a la última...
audit-kernel
Linux Kernel Audit Subsystem https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel El subsistema de Auditoría Audit del kernel de Linux proporciona un marco de registro seguro que se utiliza para capturar y registrar eventos relevantes para ...
ndaal_public_auditd
Linux Audit Daemon Auditd Best Practices and Deployment This repository provides comprehensive best practices for Linux Audit Daemon Auditd configuration and deployment, including an extensive set of security-focused audit rules, an Ansible role for automated deployment and the tools that test th...
Linux Distros Unpatched Vulnerability : CVE-2026-89643
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: avoid dropping live tree ref on fsnotify rule autoremove auditdelrule is used for both netlink deletion templates and internal fsnotify autoremove. The...
The vulnerability of the ausearch-parse.c component of the Linux Audit storage and record retrieval tool allows a perpetrator to trigger a service failure.
The vulnerability of the ausearch-parse.c component, a storage and search tool for audit records in Linux Audit, relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the extract_timestamp function in the Linux Audit storage and record-searching tool allows a perpetrator to trigger a service failure.
The vulnerability of the extracttimestamp function in the Linux Audit storage and record-searching tool is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Linux Audit storage and search tool lies in the reading beyond the allowed buffer data size, which allows an attacker to trigger a service failure.
The vulnerability of the Linux Audit recording and storage tool is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
EUVD-2008-1629
Malware in sbrugna...
EUVD-2015-5187
Malware in sbrugna...
PT-2025-55133
Уязвимость инструмента хранения и поиска записей аудита Linux Audit связана с чтением за допустимыми границами буфера данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
PT-2025-55140
Уязвимость компонента ausearch-parse.c инструмента хранения и поиска записей аудита Linux Audit связана с чтением за допустимыми границами буфера данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2025-55166
Уязвимость функции extract timestamp инструмента хранения и поиска записей аудита Linux Audit связана с ошибками разыменования указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Oracle Linux 5 : pam (ELSA-2007-0555)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0555 advisory. - CVE-2007-3102 - prevent audit log injection through user name 243204 Tenable has extracted the preceding description block directly from the Oracle...
Configuring host-level audit logging for AKS VMSS
This blog post runs you through how to enable and configure Linux audit logging on your Azure Kubernetes Service AKS Virtual Machine Scale Set VMSS using the Linux auditing subsystem, also known as auditd. Warning The information provided below is accurate as of the release date of this blog post...
SUSE CVE-2015-5186
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...
Vulners Linux Audit API for Host Vulnerability Detection: Manual Auditing, Python Scripting and Licensing
Hello everyone! This episode will be about Vulners Linux Audit API, which allows you to detect vulnerabilities on a Linux host knowing only the OS version and installed packages. I had a similar post about this 4 years ago, but some details have changed, so I came back to this topic. Manual Audit...
Linux: Read /etc/audit/audit.rules (KB)
audit.rules is a file containing audit rules that will be loaded by the audit daemons init script whenever the daemon is started. The auditctl program is used by the initscripts to perform this operation. The syntax for the rules is essentially the same as when typing in an auditctl command at a...
libreswan security and bug fix update
3.29-6.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 3.29-6 - Resolves: rhbz1714331 support NSS based IKE KDFs require updated nss for rhbz 1738689, memleak fix 3.29-5 - Resolves: rhbz1714331 support NSS based IKE KDFs so libreswan does not need FIPS certification 3.29-4 -...
NewStart CGSL MAIN 4.05 : openssh-latest Multiple Vulnerabilities (NS-SA-2019-0146)
The remote NewStart CGSL host, running version MAIN 4.05, has openssh-latest packages installed that are affected by multiple vulnerabilities: - scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice...
