13671 matches found
SUSE SLES12 Security Update : kernel (SUSE-SU-2019:1536-1) (SACK Panic) (SACK Slowness)
The SUSE Linux Enterprise 12 SP4 kernel was updated to 4.12.14 to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading to a kernel panic. CVE-2019-11479: An...
Debian DLA-1823-1 : linux security update (SACK Panic) (SACK Slowness)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2019-3846, CVE-2019-10126 huangwen reported multiple buffer overflows in the Marvell wifi mwifiex driver, which a local user could use to cause...
Debian DLA-1820-1 : thunderbird security update
Multiple security issues have been found in Thunderbird which may lead to the execution of arbitrary code if malformed email messages are read. For Debian 8 'Jessie', these problems have been fixed in version 1:60.7.1-1deb8u1. We recommend that you upgrade your thunderbird packages. NOTE: Tenable...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:1523-1)
This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage bsc1133204. CVE-2019-11470: Fixed a denial-of-service in ReadCINImage bsc1133205. CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage...
Microsoft Pushes Azure Users to Patch Linux Systems
Microsoft is warning customers that some Azure installations are vulnerable to a recently-disclosed critical Linux Exim mail server flaw that is under active attack. The warning comes after a widespread worm campaign was disclosed on Friday, targeting a flaw in the Exim mail transport agent MTA,...
Debian DLA-1819-1 : pyxdg security update
It was discovered that there was a code injection issue in PyXDG, a library used to locate 'FreeDesktop.org' configuration/cache/etc. directories. A lack of sanitisation allowed arbitrary Python code embedded in the Category element of a Menu XML document in a .menu file to be executed. For Debia...
Debian DLA-1818-1 : dbus security update
Joe Vennix discovered an authentication bypass vulnerability in dbus, an asynchronous inter-process communication system. The implementation of the DBUSCOOKIESHA1 authentication mechanism was susceptible to a symbolic link attack. A local attacker could take advantage of this flaw to bypass...
Fedora 29 : 2:podman (2019-b66d704846)
do not install /usr/libexec/crio - conflicts with crio ---- Resolves: 1715668 - CVE-2019-10152 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
Prevent the impact of a Linux worm by updating Exim (CVE-2019-10149)
This week, MSRC confirmed the presence of an active Linux worm leveraging a critical Remote Code Execution RCE vulnerability, CVE-2019-10149, in Linux Exim email servers running Exim version 4.87 to 4.91. Microsoft Azure infrastructure and Services are not affected; only customer’s Linux IaaS...
Fedora 30 : js-jquery-jstree (2019-38abc6b897)
Update to 3.3.8. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...
Fortinet FortiOS (Mac OS X) < 5.6.11, 6.0.x < 6.0.5 SSL VPN Heap Buffer Overflow (FG-IR-18-388) (deprecated)
The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-18-388.nasl plugin ID 125887 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-18-388.nasl include"compat.inc"; if description scriptid12589...
CVE-2019-11119
The CVE-2019-11119 issue affects Intel RAID Web Console 3 for Windows, version 4.186 and earlier. It stems from insufficient session validation in the service API, potentially allowing an unauthenticated user to escalate privileges via network access. Red Hat and Intel advisories confirm the vuln...
Fedora 29 : kernel / kernel-headers (2019-83858fc57b)
Update to v5.1.8 ---- Update to v5.1.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
Fedora 30 : kernel / kernel-headers (2019-c03eda3cc6)
Update to v5.1.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...
Fedora 30 : python-django (2019-57a4324120)
update to 2.1.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. T...
CVE-2019-6580
CVE-2019-6580 affects Siemens Siveillance VMS: 2017 R2 (< v11.2a), 2018 R1 (< v12.1a), 2018 R2 (< v12.2a), 2018 R3 (< v12.3a), and 2019 R1 (
CVE-2019-6581
Siemens Siveillance VMS is affected by CVE-2019-6581 (Incorrect User Management/Improper Authorization). Affected versions include 2017 R2 prior to v11.2a, 2018 R1 prior to v12.1a, 2018 R2 prior to v12.2a, 2018 R3 prior to v12.3a, and 2019 R1 prior to v13.1a. An attacker with network access to Po...
SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2019:1461-1)
This update for php7 fixes the following issues : Security issues fixed : CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory...
Microsoft Remote Desktop Connection Installed
Microsoft Remote Desktop Connection also known as Remote Desktop Protocol or Terminal Services Client is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid125835; scriptversion"1.3";...
SUSE SLES11 Security Update : gstreamer-0_10-plugins-base (SUSE-SU-2019:14076-1)
This update for gstreamer-010-plugins-base fixes the following issues : Security issues fixed : CVE-2017-5837: Fixed a floating point exception in gstriffcreateaudiocaps bsc1024076. CVE-2017-5844: Fixed a floating point exception in gstriffcreateaudiocaps bsc1024079. CVE-2019-9928: Fixed a...