13672 matches found
Fedora 29 : radvd (2019-9790f1867a)
Fix double-free in InterfaceList Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Fedora 28 : nagios (2019-0b44528ff1)
Incorporate many fixes from Justin Paulsen THANKS!!! ---- Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441 CVE-2016-8641 ---- Remove section which unset nagios Fix BZ1568273 Note that Tenable Network Security has extracted the preceding description block directly from t...
Software Defined Perimeter - a Modern VPN with Traditional Challenges
Application Servers are implemented as a means of providing services and making resources available to users. However, any server connected to the Internet is inevitably targeted by malicious users using open listening ports. There are millions of these ports on the Internet, which means there is...
Debian DLA-1644-1 : policykit-1 security update
Two vulnerabilities were found in Policykit, a framework for managing administrative policies and privileges : CVE-2018-19788 It was discovered that incorrect processing of very high UIDs in Policykit could result in authentication bypass. CVE-2019-6133 Jann Horn of Google found that Policykit...
Fedora 28 : python37 (2019-b8ffb3768d)
Security fix for CVE-2019-5010 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
Debian DLA-1643-1 : krb5 security update
krb5, a MIT Kerberos implementation, had several flaws in LDAP DN checking, which could be used to circumvent a DN containership check by supplying special parameters to some calls. Further an attacker could crash the KDC by making S4U2Self requests. For Debian 8 'Jessie', these problems have bee...
Debian DLA-1641-1 : mxml security update
Several stack exhaustion conditions were found in mxml that can easily crash when parsing xml files. CVE-2016-4570 The mxmlDelete function in mxml-node.c allows remote attackers to cause a denial of service stack consumption via crafted xml file. CVE-2016-4571 The mxmlwritenode function in...
Amazon Linux 2 : openssl (ALAS-2019-1153)
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. CVE-2018-0734 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
macOS 10.14.x < 10.14.3 Multiple Vulnerabilities
The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.3. It is, therefore, affected by multiple vulnerabilities related to the following components: - AppleKeyStore - Bluetooth - Core Media - CoreAnimation - FaceTime - IOKit - Kernel - libxpc - Natural Language...
Linux: Accept IPv6 router advertisements
To set up its default route and choose an IPv6 address, a Linux system requests and listen for router advertisements. Router advertisements can be used to route traffic to compromised systems. This script tests whether the Linux host is configured to accept IPv6 router advertisements...
Fedora 29 : curl (2019-427a0ba9e3)
xattr: strip credentials from any URL that is stored CVE-2018-20483 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Advantech WebAccess/SCADA
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WebAccess/SCADA Vulnerabilities: Improper Authentication, Authentication Bypass, SQL Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow an...
Fedora 29 : poppler (2019-7ff7f5093e)
Security fix for CVE-2018-20551, CVE-2018-20481, CVE-2018-20650 and CVE-2018-18897. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...
WAS Target Discovery for PCI
This plugin discovers web sites on a scanned system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid121348; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/05/24"; scriptnameenglish:"WAS Target Discovery for PCI";...
SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0146-1)
This update for webkit2gtk3 to version 2.22.5 fixes the following issues : Security issues fixed : CVE-2018-4438: Fixed a logic issue which lead to memory corruption bsc1119554 CVE-2018-4437, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464: Fixed multiple memory corruption issues with...
Fedora 29 : mingw-libjpeg-turbo (2019-a018522ba3)
Security fix for CVE-2018-19664 and CVE-2018-20330. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 28 : matrix-synapse (2019-c6044b3fce)
Fix for CVE-2019-5885 Upgrade notes available at https://github.com/matrix-org/synapse/blob/v0.34.0/UPGRADE.rstupgradi ng-to-v0340 - Note this continues to use Python 2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...
SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2019:0132-1)
This update for openssh fixes the following issues : Security issue fixed : CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions bsc1121571 CVE-2019-6109: Fixed an issue where the scp client would allow malicious remote SSH servers to...
Fedora 28 : gnupg2 (2019-e70c729d8a)
Minor update to upstream version 2.2.12 fixing moderate security issue and other bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...