180 matches found
SUSE-SU-2023:4176-1 Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2023-28755: Fixed a ReDoS vulnerability in URI. bsc1209891 - CVE-2023-28756: Fixed an expensive regexp in the RFC2822 time parser. bsc1209967 - CVE-2021-41817: Fixed a Regular Expression Denial of Service Vulnerability of Date Parsing...
Denial Of Service (DoS)
gitlab is vulnerable to Denial of Service DoS. A malicious user is able to leverage the vulnerability to cause peformance issues which will result in denial of service conditions...
yaraQA - YARA Rule Analyzer To Improve Rule Quality And Performance
YARA rule Analyzer to improve rule quality and performance Why? YARA rules can be syntactically correct but still dysfunctional. yaraQA tries to find and report these issues to the author or maintainer of a YARA rule set. The issues yaraQA tries to detect are e.g.: rules that are syntactically...
SUSE-SU-2023:2603-1 Security update for rustup
This update for rustup fixes the following issues: - CVE-2022-31394: Fixed possible HTTP2 attacks by specifying the HTTP/2 SETTINGSMAXHEADERLISTSIZE bsc1208552. - CVE-2023-26964: Fixed high memory and CPU usage when stream stacking occurs when H2 processes HTTP2 RSTSTREAM frames bsc1210345...
Support for ICA files in XenApp/XenDesktop Environment
When users are connecting to XenApp or XenDesktop with an ICA file, there could occur a wide range of issues related to connection, load balancing, performance,cosmetic issues with an application and so on. For users connecting with Citrix Receiver or Citrix Receiver in conjunction with StoreFron...
MGASA-2023-0174 Updated suricata packages fix security vulnerability
Various security, performance, accuracy and stability issues. See referenced package announcements for details...
SUSE-SU-2023:1820-1 Security update for harfbuzz
This update for harfbuzz fixes the following issues: - CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger On^2 growth via consecutive marks bsc1207922...
Medium: python3.9
Issue Overview: A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16,...
OPENSUSE-SU-2022:10255-1 Security update for vlc
This update for vlc fixes the following issues: - Update to version 3.0.18 CVE-2022-41325, boo1206142: + macOS: Fix audio device listing with non-latin names. + Misc: Fix rendering and performance issue with older GPUs. + Updated translations. - Changes from version 3.0.18-rc2: + Codec/Demux: - A...
Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12628)
Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS has a security vulnerability that stems from its failure to properly configure resource allocation limits or throttling, which could b...
CVE-2022-3204 NRDelegation Attack
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
Promiscous VLAN Tag Drops: Cause, Symptoms, and Solution
The counter nicerrvlanpromisctagdrops is incrementing. This may also cause performance issues and/or exceed the limits of a bandwidth license, triggering packet loss...
DEF CON 30. Hacking EFBs. Engine Performance
At DEF CON 30 this year we demonstrated some vulnerabilities in electronic flight bags and the potential impact on flight safety. Thereâs plenty more detail of EFB security issues here. As part of the Aerospace Village at DEF CON 30, we invited people to fly our flight sim under instruction from...
Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2022-2264)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2022:10023-1 Security update for tor
This update for tor fixes the following issues: tor was updated to 0.4.7.8: Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious...
CVE-2022-1949
A flaw was found in the 389-ds-base package where some LDAP queries can cause performance issues. This flaw allows an attacker to send a non-optimal search that causes serious performance issues within the directory server...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.513.2.el7 - Revert 'rds/ib: recover rds connection from stuck tx path' Nagappan Ramasamy Palaniappan Orabug: 34124234 4.14.35-2047.513.1.el7 - mm/page-writeback: Fix performance when BDI's share of ratio is 0. Chi Wu Orabug: 34050050 - esp: Fix possible buffer overflow in ESP...
SUSE-SU-2022:0934-1 Security update for binutils
This update for binutils fixes the following issues: - For compatibility on old code stream that expect 'brcl 0,label' to not be disassembled as 'jgnop label' on s390x. bsc1192267 This reverts IBM zSeries HLASM support for now. - Fixed that ppc64 optflags did not enable LTO bsc1188941. - Fix empt...
January 4, 2022âKB5010196 (OS Build 17763.2369) Out-of-band
None None...
OPENSUSE-SU-2021:3647-1 Security update for samba and ldb
This update for samba and ldb fixes the following issues: - CVE-2020-25718: Fixed that an RODC can issue forge administrator tickets to other servers bsc1192246. - CVE-2021-3738: Fixed crash in dsdb stack bsc1192215. - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we requir...