CVE-2018-6556

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...

CVE-2018-6556

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...

CVE-2018-6556

CVE-2018-6556 affects lxc-user-nic where, when asked to delete a network interface, the code unconditionally opens a user-supplied path. This can let an unprivileged user infer the existence of a path they should not reach and may trigger side effects by opening (read-only) kernel files such as /...

Ubuntu 18.04 LTS : LXC vulnerability (USN-3730-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3730-1 advisory. Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic utility. A local attacker could possibly use this issue to open arbitrary files. Tenabl...

Ubuntu: Security Advisory (USN-3730-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3730-1 lxc vulnerability

Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic utility. A local attacker could possibly use this issue to open arbitrary files...

CVE-2018-6556

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...

CVE-2018-11047: UAA accepts refresh token as access token on admin endpoints | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using uaa versions 4.19 prior to 4.19.2, 4.12 prior to 4.12.4, 4.10 prior to 4.10.2, 4.7 prior to 4.7.6, 4.5 prior to 4.5.7 You are using uaa-release versions v60 prior to v60.2, v57 prior to v57.4,...

Unbreakable Enterprise kernel security update

4.1.12-124.17.1 - block: update integrity interval after queue limits change Ritika Srivastava Orabug: 27586756 - dccp: check sk for closed state in dccpsendmsg Alexey Kodanev Orabug: 28001529 CVE-2017-8824 CVE-2018-1130 - net/rds: Implement ARP flushing correctly Hakon Bugge Orabug: 28219857 -...

Scientific Linux Security Update : libvirt on SL7.x x86_64 (20180515)

Security Fixes : - libvirt: Resource exhaustion via qemuMonitorIORead method CVE-2018-5748 - libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent CVE-2018-1064 The CVE-2018-1064 issue was discovered by Daniel P. Berrang Red Hat and the CVE-2018-5748 issue was discovered by Dani...

April 10, 2018—KB4093118 (Monthly Rollup)

None None...

Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018

Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018 Summary An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout...

The vulnerability of the Cisco Unified Computing System (UCS) Manager, the microsoftware-based network interface card of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and the Cisco Firepower 9300 Security Appliance allows a attacker to gain access to the device with root privileges.

The vulnerability of the Cisco Unified Computing System UCS Manager, the microprogrammed network interface software of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and the Cisco Firepower 9300 Security Appliance is related to the lack of measures for input data cleansing...

CVE-2015-1142857

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before...

Design/Logic Flaw

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before...

CVE-2015-1142857

CVE-2015-1142857 describes a network-virtualization flaw where VFs assigned to guests can cause ethernet flow-control pause frames to be sent via the PF on SR-IOV NICs. The vulnerability affects multiple drivers and firmware families: Linux ixgbe (before commit f079fa005aae08ee0e1bc32699874ff4f02...

CVE-2015-1142857

On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before...

nic-snail.ru XSS vulnerability

Open Bug Bounty ID: OBB-457904 Description| Value ---|--- Affected Website:| nic-snail.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

How to script removing and rescanning "Ghost NIC" devices in Windows

It's sometimes necessary to run DevMgr in "nonpresent device" mode to remove all nonpresent NIC devices, and sometimes the present NIC too, and then rescan the network to fix problems. It's possible, using the Microsoft Windows Development Kit tool DEVCON.EXE, to script this operation if you know...

SUSE-SU-2017:3319-1 Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP3)

This update for the Linux Kernel 4.4.82-63 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...