Photon OS 1.0: Libvirt PHSA-2020-1.0-0289

An update of the libvirt package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1118-1)

The SUSE Linux Enterprise 12 SP5 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a...

CVE-2018-21097

CVE-2018-21097 affects multiple NETGEAR wireless APs including WAC505/WAC510 (pre-5.0.5.4), WAC120 (pre-2.1.7), WN604 (pre-3.3.10), WNAP320/WNAP210v2 (pre-3.7.11.4), WNDAP350/360/660 (pre-3.7.11.4), WNDAP620 (pre-2.1.7) and WND930 (pre-2.1.5). The issue is a stack-based buffer overflow exploitabl...

CVE-2020-12266

An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be accessed...

Eight Common OT / Industrial Firewall Mistakes

Most industrial sites deploy firewalls as the first line of defense for their Operations Technology OT / industrial networks. However, configuring and managing these firewalls is a complex undertaking. Configuration and other mistakes are easy to make. This article explores eight common mistakes...

Fedora 31 : php (2020-62ee541bbb)

PHP version 7.3.17 16 Apr 2020 Core: - Fixed bug php79364 When copy empty array, next key is unspecified. cmb - Fixed bug php78210 Invalid pointer address. cmb, Nikita CURL: - Fixed bug php79199 curlcopyhandle memory leak. cmb Date: - Fixed bug php79396 DateTime hour incorrect during DST jump...

Fedora 31 : gnuchess (2020-dbccd7e9be)

6.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...

Fedora 31 : git (2020-f6b3b6fb18)

Security fix for CVE-2020-5260 From the upstream release notes : With a crafted URL that contains a newline or empty host, or lacks a scheme, the credential helper machinery can be fooled into providing credential information that is not appropriate for the protocol in use and host being contacte...

Fedora 30 : ansible (2020-1b6ce91e37)

Update to upstream bugfix and security update 2.9.7. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELO G-v2.9.rst for a detailed list of changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system websit...

Fedora 31 : liblas (2020-b0695fcdf7)

This update fixes the following security vulnerabilities: CVE-2018-20536, CVE-2018-20537, CVE-2018-20539, CVE-2018-20540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 31 : qt5-qtbase (2020-3069e44be5)

Security fix for CVE-2015-9541 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

[SECURITY] Fedora 30 Update: wireshark-3.2.3-1.fc30

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

SUSE SLED15 / SLES15 Security Update : Test update for SUSE:SLE-15-SP2:Update (security) (SUSE-SU-2020:1077-1)

This is a security test update for SUSE:SLE-15-SP2:Update Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2020:1083-1)

This update for cups fixes the following issues : CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption bsc1168422. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:1065-1)

This update for ovmf fixes the following issues : CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

CVE-2020-11940

CVE-2020-11940 affects nDPI up to 3.2 Stable. The root cause is an out-of-bounds read in concat_hash_string (ssh.c). This enables a network-positioned attacker to exploit malformed SSH protocol messages on a network segment monitored by nDPI’s library, potentially impacting availability. The desc...

Exploit for Improper Authentication in Microsoft

CVE-2020-0688 Working Exploit PoC CVE-202...

Photon OS 3.0: Linux PHSA-2020-3.0-0082

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0082. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135871;...

CVE-2020-11967

CVE-2020-11967 affects IQrouter firmware up to v3.3.1. The vulnerability is caused by Incorrect Access Control, enabling remote attackers to take full device control (e.g., restart network, reboot, upgrade, reset) without authentication. Documentation consistently notes this risk is most relevant...

Photon OS 3.0: Httpd PHSA-2020-3.0-0079

An update of the httpd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0079. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135787...