Fedora: Security Advisory for tcpreplay (FEDORA-2020-256ac53cc7)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a vulnerability in CNI IPv6 route advertisement (CVE-2020-13597)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in CNI IPv6 route advertisement that could allow the attacker to redirect full or partial network traffic from the node to the compromised pod within the cluster CVE-2020-13597 Vulnerability Details CVEID: CVE-2020-13597...

[SECURITY] Fedora 32 Update: tcpreplay-4.3.3-1.fc32

Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap tcpdump and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information...

Updated cups packages fix security vulnerability

Updated cups packages fix security vulnerabilities: It was discovered that CUPS incorrectly handled certain language values. A local attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or possibly obtain sensitive information CVE-2019-2228. Stephan...

CVE-2020-10136

A flaw was found in the IP-in-IP protocol. An unauthenticated attacker can use the IP-in-IP protocol to route network traffic through a vulnerable device, which can lead to spoofing, access control bypasses, and other unexpected network behaviors. Mitigation Systems that have IP in IP kernel...

CVE-2020-13597

Clusters using Calico version 3.14.0 and below, Calico Enterprise version 2.8.2 and below, may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route...

Information disclosure

Clusters using Calico version 3.14.0 and below, Calico Enterprise version 2.8.2 and below, may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route...

CVE-2020-13597 Calico nodes IPv6 traffic redirection from route advertisment

Clusters using Calico version 3.14.0 and below, Calico Enterprise version 2.8.2 and below, may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route...

CVE-2020-13597

Calico and Calico Enterprise clusters are affected (Calico ≤ 3.14.0; Calico Enterprise ≤ 2.8.2). The root cause is improper validation of IPv6 router advertisements, allowing a compromised privileged pod to reconfigure the node’s IPv6 interface because the node accepts route advertisements by def...

Man-in-the-Middle (MitM)

docker engine is vulnerable to man-in-the-middle attack. An attacker is able to craft malicious IPv6 router advertisements and spoof external IPv6 hosts to perform a MITM attack and potentially obtain confidential information or modify network traffic...

PT-2020-13614 · Tigera · Calico Enterprise +1

Name of the Vulnerable Software and Affected Versions: Calico versions 3.14.0 and below Calico Enterprise versions 2.8.2 and below Description: The issue allows a compromised pod with sufficient privilege to reconfigure the node's IPv6 interface, enabling the attacker to redirect network traffic...

IP-in-IP protocol routes arbitrary traffic by default

Overview IP Encapsulation within IP RFC2003 IP-in-IP can be abused by an unauthenticated attacker to unexpectedly route arbitrary network traffic through a vulnerable device. Description IP-in-IP encapsulation is a tunneling protocol specified in RFC 2003 that allows for IP packets to be...

UPDATE: Ostinato 1.0

Ostinato 1.0 was released a while ago. I covered this open source tool some time ago in a post titled – Ostinato: The Network Traffic Generator and Analyzer! A lot has changed such as the code has now been ported to Qt5 with an improved UI for variable fields widget. What is Ostinato? Ostinato is...

[ASA-202005-16] freerdp: information disclosure

Arch Linux Security Advisory ASA-202005-16 ========================================== Severity: High Date : 2020-05-23 CVE-ID : CVE-2020-13396 CVE-2020-13397 CVE-2020-13398 Package : freerdp Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1172 Summary ======= T...

Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.1.13 / 8.1.x < 8.1.13 / 9.0.x < 9.0.6 / 9.1.x < 9.1.1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.1.13 or 8.1.x prior to 8.1.13 or 9.0.x prior to 9.0.6 or 9.1.x prior to 9.1.1. It is, therefore, affected by a vulnerability. - A cleartext transmission of sensitive information...

Man-in-the-Middle (MtiM)

keycloak-services is vulnerable to man-in-the-middle attack. The signatures on CRL are not validated, allowing a remote attacker to perform man-in-the-middle attacks to sniff and modify network traffic...

Design/Logic Flaw

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama versio...

PAN-OS: Panorama context switch session cookie disclosure

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama versio...

Man-in-the-Middle (MitM)

testng is vulnerable to man-in-the-middle attacks. The library performs network request over an insecure HTTP channel when loading a DTD, regardless of the Suite.xml declarations. This allows a remote attacker to perform a man-in-the-middle attack to intercept and modify network traffic...

Man-in-the-Middle (MitM)

Java-Websocket is vulnerable to Man-in-the-Middle MitM. The SSL hostname validation is not enabled by default, allowing an attacker to perform a man-in-the-middle attack to intercept and modify network traffic...