22 matches found
auditd
/ | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Configuration Idea The idea of this auditd configuration is to provide a best-practice baseline that is designed to load out-of-the-box on major Linux distributions covers a broad set of security-relevant...
fpdt_process_subtable Heap Buffer Overflow DoS
The vulnerability of the fpdtprocesssubtable function in the drivers/acpi/acpifpdt.c file of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to the use of an incorrect address. Exploiting this vulnerability could allow an attacker to...
CPSD CryptoPro Secure Disk security vulnerability
CPSD CryptoPro Secure Disk is a transparent disk encryption software developed by CPSD. There is a security vulnerability in CPSD CryptoPro Secure Disk. This vulnerability stems from the fact that configuration files in the Linux operating system’s integrity checks are not verified through the...
How To Enable DDBoost Immutability with Governance Mode
Purpose This article provides additional information for enabling immutability for the Dell Data Domain deduplicating storage appliance when using governance mode, as referenced in the Veeam Backup & Replication User Guide here: Veeam Backup & Replication User Guide Backup Infrastructure Componen...
EUVD-2018-4184
Malware in sbrugna...
EUVD-2024-41638
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-7788
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the...
CVE-2024-45709
SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...
openSUSE 15 Security Update : haserl (openSUSE-SU-2021:1279-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1279-1 advisory. - Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any...
CVE-2021-29133
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...
CVE-2021-29133
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...
CVE-2021-29133
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...
CVE-2021-29133
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...
CVE-2021-29133: Undefined Security Weakness
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...
PT-2021-18099
Name of the Vulnerable Software and Affected Versions: Alpine Linux Configuration Framework versions prior to 0.9.36 Description: The issue is related to a lack of verification in haserl, a component of Alpine Linux Configuration Framework. This allows local users to read the contents of any file...
Source Routed Packet Weakness
The remote host accepts loose source routed IP packets. The feature was designed for testing purpose. An attacker may use it to circumvent poorly designed IP filtering and exploit another flaw. However, it is not dangerous by itself. C Tenable Network Security, Inc. References: RFC 792 Internet...
Linuxconf 1.1.x1.2.x - Local Environment Variable Buffer Overflow (2)
Linuxconf 1.1.x1.2.x - Local Environment Variable Buffer Overflow 2 // source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. ...
Buffer overflow in linuxconf
Buffer overflow in environment variable parsing...
Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. A buffer overflow vulnerability has been reported for Linuxconf. The...
Linuxconf 1.1.6 r10 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/2352/info Linuxconf is a Linux configuration utility from Solucorp. An attacker supplying excess data to the USERAGENT field in vulnerable versions of Linuxconf. This data can overflow the relevant buffer, creating a stack overflow and, properly...