Design/Logic Flaw

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

CVE-2019-15900

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum3, sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The resul...

Fortinet FortiSIEM 5.0 / 5.2.1 Improper Certification Validation

Product Name: FortiSIEM Tested versions: 5.0, 5.2.1 Fixed in version: Only a manual workaround is available from Fortinet as of this writing Weakness Type: CWE-295 - Improper Certificate Validation Discovered by: Andrew Klaus Cybera Canada CVE: Pending == Disclosure Timeline: June 25, 2019: Initi...

The vulnerability of the tcp_sack_option() function in the kernel of the OpenBSD operating system allows a hacker to cause a service failure.

The vulnerability of the tcpsackoption function in the kernel of the OpenBSD operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2019-8460

OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...

CVE-2019-8460

OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...

Code injection

OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...

CVE-2019-8460

OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...

CVE-2019-8460

CVE-2019-8460 affects the OpenBSD kernel (versions

CVE-2019-8460

OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...

PT-2019-3099

Name of the Vulnerable Software and Affected Versions OpenBSD kernel versions prior to 6.5 Description The issue exists due to insufficient input validation in the tcp sack option function of the OpenBSD kernel. This can be exploited by a remote attacker to cause a denial of service. An attacker...

CVE-2019-8460: Excessive Data Query Operations in a Large Data Table

OpenBSD kernel version = 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcpsackoption for every incoming SACK packet which can lead to a denial of service...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Openbsd Openssh

This is the first version of the "weaponized" exploit for CV...

OpenSSH < 5.9 Multiple DoS

Binary data 701162.prm...

CVE-2019-6724

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root...

Design/Logic Flaw

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root...

CVE-2019-6724

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root...

CVE-2019-6724

CVE-2019-6724 concerns the Barracuda VPN Client. The vulnerable component is the barracudavpn component in version prior to 5.0.2.7 for Linux, macOS, and OpenBSD, which runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary co...

[SECURITY] Fedora 28 Update: openssh-7.8p1-4.fc28

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 29 Update: openssh-7.9p1-3.fc29

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...