1185 matches found
USN-4186-1: Linux kernel vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
USN-4185-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
USN-4184-1: Linux kernel vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4184-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4184-1 advisory. Stephan van Schaik, Alyssa Milburn, Sebastian sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp,...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the MySQL Server component in the “Security: Encryption” section is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network protocol...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network protocol...
Vulnerability of the MySQL Server component: This component of the database management system allows a hacker to cause system downtime or service failures.
The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL network protocol...
The vulnerability of the Connector/ODBC sub-component of the MySQL Connectors component of the database management system MySQL allows a attacker to cause a service failure.
The vulnerability of the Connector/ODBC sub-component of the MySQL Connectors database management system is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to cause service failures using the MySQL network protocol...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network protocol...
Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause service interruptions.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...
The vulnerability of the Oracle Hospitality RES 3700 component in the Oracle Food and Beverage Applications software package allows a hacker to gain full control over the application.
The vulnerability of the Oracle Hospitality RES 3700 component of the Oracle Food and Beverage Applications software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through network HTTP protocols...
DEBIAN-CVE-2018-16228
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:printprefix...
Decades-Old Code Is Putting Millions of Critical Devices at Risk
Nearly two decades ago, a company called Interpeak created a network protocol that became an industry standard. It also had severe bugs that are only now coming to light...
USN-4115-1: Linux kernel vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this ...
QEMU Denial Of Service
include include include include include include include include include include include include include include include include include define diex do \ perrorx; \ exitEXITFAILURE; \ while0; // Constans define SRCADDR "10.0.2.15" define DSTADDR "10.0.2.2" define INTERFACE "ens3" define ETHHDRLEN ...
CVE-2019-6624
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service DoS...
Denial Of Service (DoS)
Wireshark is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the...
Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum
Description S4U2Self is an extension to Kerberos used in Active Directory to allow a service to request a kerberos ticket to itself from the Kerberos Key Distribution Center KDC for a non-Kerberos authenticated user principal in Kerboros parlance. This is useful to allow internal code paths to be...
Termshark - A Terminal UI For Tshark, Inspired By Wireshark
A terminal user-interface for tshark, inspired by Wireshark. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Read pcap files or sniff live interfaces where tshark is permitted. Inspect each packet using familiar...
Integer Overflow
Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...