Juniper Junos CVE-2019-0075 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D20 Juniper Junos 12.3X48-D25...

CVE-2016-7141

It was found that the libcurl library using the NSS Network Security Services library as TLS/SSL backend incorrectly re-used client certificates for subsequent TLS connections in certain cases. An attacker could potentially use this flaw to hijack the authentication of the connection by leveragin...

SAP BusinessObjects Business Intelligence Platform Multiple Cross Site Scripting Vulnerabilities

Description SAP BusinessObjects Business Intelligence Platform is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Remote attackers can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities (CVE-2019-11479, CVE-2019-11478, CVE-2019-11477)

Summary IBM QRadar Network Security is affected by Linux kernel vulnerabilities Vulnerability Details CVEID: CVE-2019-11479 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a flaw when processing minimum segment size MSS. By sending specially-crafted MSS traffic, a remote...

Fedora 31 : miniupnpd (2019-0a26e06dd5)

Security patches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 31 : bird (2019-ff0f9ce167)

BIRD 2.0.6 2019-09-10 ======================= - RAdv: Solicited unicast RAs - BGP: Optional Adj-RIB-Out - BGP: Extended optional parameters length - Filter: Sets and set expressions in path masks - Several important bugfixes Note that Tenable Network Security has extracted the preceding descripti...

Fedora 31 : exim (2019-e080507ba5)

This is an update fixing CVE-2019-16928. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 31 : libnbd (2019-ec2eedaa9e)

New upstream version 1.0.2. Contains fix for NBD Protocol Downgrade Attack CVE-2019-14842. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 31 : expat (2019-613edfe68b)

This update of expat fixes the following security issue : - CVE-2019-15903 -- Fix heap overflow triggered by XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber, and deny internal entities closing the doctype The following bug fixes are also included : - Fix cases where XMLStopParser did not hav...

Fedora 31 : pdfbox (2019-88f53a7433)

Update to 2.0.16 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 31 : 1:java-1.8.0-openjdk-aarch32 (2019-0bb3cfd816)

8u222 update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...

Fedora 31 : chromium (2019-df4fb49ef7)

Chromium 77.0.3865.90 update. See the official announcement on https://chromereleases.googleblog.com/2019/09/stable-channel-update-fo r-desktop.html and https://chromereleases.googleblog.com/2019/09/stable-channel-update-fo r-desktop18.html Note that Tenable Network Security has extracted the...

Fedora 31 : zeromq (2019-d20ce4d5a1)

Security fix for CVE-2019-13132 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2019:2550-1)

This update for bind fixes the following issues : Security issue fixed : CVE-2019-6471: Fixed a reachable assert in dispatch.c. bsc1138687 Non-security issue fixed: bind will no longer rely on /etc/insserv.conf bsc1118367, bsc1118368 Note that Tenable Network Security has extracted the preceding...

Fedora 31 : dino (2019-2555c77f63)

Update dino to a96c8014, which addresses three CVEs. CVE-2019-16235 ============== Dino did not properly check the source of message carbons. https://nvd.nist.gov/vuln/detail/CVE-2019-16235 Fixed in https://github.com/dino/dino/commit/e84f2c49567e86d2a261ea264d65c4adc5 49c930 CVE-2019-16236...

Fedora 31 : pdfresurrect (2019-b20614ff74)

Security fix for CVE-2019-14267 - Security fix for CVE-2019-14934 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 31 : scapy (2019-20d6b8f9c4)

The remote Fedora 31 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-20d6b8f9c4 advisory. bugfix bump to version 2.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Debian DLA-1946-1 : novnc security update

An XSS vulnerability was discovered in noVNC in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name. For Debian 8 'Jessie', this problem has been fixed in version...

Fedora 31 : irssi (2019-d2257607b8)

This is new version of irssi fixing CVE-2019-15717. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 31 : jackson-annotations / jackson-bom / jackson-core / jackson-databind (2019-99ff6aa32c)

Update jackson-databind to version 2.9.9.3. - Update jackson-core to version 2.9.9. - Update jackson-annotations to version 2.9.9. - Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439. Note that Tenable Network Security has...