[SECURITY] Fedora 36 Update: frr-8.2.2-2.fc36

FRRouting is free software that manages TCP/IP based routing protocols. It ta kes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EI GRP and BFD. FRRouting is a fork of Quagga...

EulerOS Virtualization 3.0.2.0 : glibc (EulerOS-SA-2022-1678)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its...

EulerOS Virtualization 3.0.2.0 : nfs-utils (EulerOS-SA-2022-1695)

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterpris...

EulerOS Virtualization 3.0.2.0 : binutils (EulerOS-SA-2022-1697)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reorderi...

CVE-2022-27495

Summary of CVE-2022-27495 : The vulnerability affects NGINX Service Mesh (NGINX Service Mesh control plane) where endpoints are exposed to the cluster overlay network in versions 1.3.x; fixed in 1.4.0. The F5 advisory K94093538 lists affected branch 1.x (1.3.0–1.3.1) with fix in 1.4.0, and descri...

CANs Reinvent LANs for an All-Local World

In an article I wrote over a year ago called “Securing the New Normal of Network Access,” I presented four access scenarios that modern organizations needed to enable users to stay securely connected and protected in the new normal of a work-from-anywhere world. Of course, “new” is a relative ter...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2022-1621)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue...

Workshop: Simplifying Network Security in the Cloud

In this workshop, you will learn how to leverage Trend Micro Cloud One™ - Network Security to provide a powerful network security layer which can be deployed seamlessly into your existing AWS architecture...

Cisco Small Business RV Series Routers: Operating System Command Injection Vulnerability

Cisco Small Business RV Series Routers is an RV series router from Cisco, U.S. A command injection vulnerability exists in Cisco Small Business RV Series Routers, which can be exploited by attackers to inject and execute arbitrary commands on the underlying operating system of the affected device...

Which Hole to Plug First? Solving Chronic Vulnerability Patching Overload

According to folklore, witches were able to sail in a sieve, a strainer with holes in the bottom. Unfortunately, witches don't work in cybersecurity – where networks generally have so many vulnerabilities that they resemble sieves. For most of us, keeping the sieve of our networks afloat requires...

PT-2022-2690

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description The issue is related to the CURLOPT CERTINFO option in libcurl, which allows applications to request details about a server's certificate chain. Due to an erroneous function, a malicious serv...

Cisco Adaptive Security Appliances Software Buffer Overflow Vulnerability

Cisco Adaptive Security Appliances Software is a set of firewalls and network security platforms from the U.S. company Cisco Cisco. The platform provides highly secure access to data and network resources and other features. A buffer overflow vulnerability exists in the Cisco Adaptive Security...

Cisco Adaptive Security Appliance和Firepower Threat Defense拒绝服务漏洞（CNVD-2022-44689）

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances Software are both products of Cisco, Inc. Cisco Adaptive Security Appliances Software is a firewall and network security platform. The platform provides highly secure access to data and network resources, among other...

IBM Java 6.0 < 6.0.16.20 / 6.1 < 6.1.8.20 / 7.0 < 7.0.9.30 / 7.1 < 7.1.3.30 / 8.0 < 8.0.2.10 Multiple Vulnerabilities (Jan 19, 2016)

The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.20 / 6.1 6.1.8.20 / 7.0 7.0.9.30 / 7.1 7.1.3.30 / 8.0 8.0.2.10. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle January 19 2016 CPU advisory. - Mozilla Network Security Services NSS befo...

Design/Logic Flaw

Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share...

Reaching the Convergence of Security and Productivity

It’s all too common that IT security tools and practices come at the cost of productivity. Even physical security has this trade-off. There would be no rush to arrive at the airport an hour early if it weren’t for the extensive security measures that flying entails. As a result of this trade-off,...

Microsoft best practices for managing IoT security concerns

The Internet of Things, or IoT, has expanded beyond the mere concept that it was when first introduced. IoT is now part of most individuals’ daily activities, from smart speakers and thermostats to smartwatches and vehicles. IoT devices and systems bring massive convenience and functionality. IoT...

FBI Warns of BlackCat Ransomware That Breached Over 60 Organisations Worldwide

The U.S. Federal Bureau of Investigation FBI is sounding the alarm on the BlackCat ransomware-as-a-service RaaS, which it said victimized at least 60 entities worldwide between as of March 2022 since its emergence last November. Also called ALPHV and Noberus, the malware is notable for being the...

EulerOS 2.0 SP5 : ldns (EulerOS-SA-2022-1538)

According to the versions of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When ldns version 1.7.1 verifies a zone file, the ldnsrrnewfrmstrinternal function has a heap out of bounds read vulnerability. An attacker can lea...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2022-1569)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP...